HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 30, 2018.
- Organization as reported
- Medical Center Ophthalmology Associates, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- April 30, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13833, row:4972)
- Archived copy
- Held in the private archive (provenance)
A workforce member of the covered Entity (CE), Medical Center Ophthalmology Associates, sent a mass email to patients, in lieu of using its patient portal, and accidentally disclosed the patients’ email addresses in the “Cc” field instead of the “Bcc” field. The protected health information involved included the email addresses of approximately 3,017 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following this breach, the CE sanctioned the involved workforce member and retrained employees. OCR confirmed the CE had policies and procedures in place prior to the breach and obtained assurances that the CE implemented the corrective actions listed above.