HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 2, 2013.
- Organization as reported
- Missouri Department of Social Services, MO
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Aug. 2, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15352, row:6491)
- Archived copy
- Held in the private archive (provenance)
On June 6, and August 13, 2013, the covered entity (CE) Missouri Department of Social Services, discovered that it’s business associate (BA), InfoCrossing Inc., mailed Missouri Medicaid (MO) participants’ enrollment correspondence to incorrect addresses during the period of October 16, 2011 to June 7, 2013. The correspondence contained MO Medicaid participants’ names, dates of birth, MO Medicaid account numbers, counties, phone numbers, and the last four digits of participants’ Social Security numbers, affecting approximately 1,546 individuals. The CE provided breach notification to HHS, affected individuals, and the media, as well as the Missouri Attorney General's Office. To prevent similar breaches from happening in the future, the CE deleted all its participants’ mailing addresses from its system and provided training to its workforce on its policies and procedures regarding cybersecurity awareness. OCR obtained documented assurances that the CE implemented the corrective actions listed above.