HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 2, 2017.
- Organization as reported
- LSU Health Care Services Division, LA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- Oct. 2, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14039, row:5178)
- Archived copy
- Held in the private archive (provenance)
LSU Health Care Services Division, the covered entity (CE), reported that a prior workforce member improperly used her job-based access to view the protected health information (PHI) of approximately 1,471 patients from August 21, 2009, through March 16, 2014. The types of PHI involved in the breach included clinical, demographic, and financial information. Following the breach, the CE provided breach notification to HHS, affected individuals and the media. The CE also implemented an access monitoring system in its sole remaining hospital. OCR obtained assurances that the CE implemented the corrective actions noted above as well as a written assurances that the CE will re-train its staff.