HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Dec. 8, 2020.
- Organization as reported
- Mirra Health Care, FL
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Dec. 8, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12466, row:3605)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), Mirra Health Care, reported that an employee had impermissibly provided electronic protected health information (ePHI) to an unauthorized individual via email. This breach affected 1,064 individuals. The ePHI involved included names, addresses, phone numbers, dates of birth, Social Security numbers, and health insurance and clinical information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA sanctioned the responsible employee and implemented additional administrative, technical, and security safeguards to better protect its PHI. All staff were retrained. OCR provided the BA with technical assistance pertaining to the HIPAA Breach Notification Rule and other obligations.