HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 21, 2018.
- Organization as reported
- Missouri Dept. of Mental Health, MO
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- Feb. 21, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13916, row:5055)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Missouri Dept. of Mental Health, erroneously mailed letters to family members of individuals receiving services, affecting 1,000 individuals. The protected health information (PHI) involved in the breach included consumers' names. Following the breach, the CE implemented additional safeguarding and quality control procedures for mailings. The CE provided notice of the breach to affected individuals, the media, and to HHS. As a result of OCR’s investigation, the CE updated its Breach Rule Notification policy, specifically to include information about reporting breaches that affected under 500 individuals. OCR obtained documented assurances that the CE implemented the corrective actions listed above.