HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 1, 2019.
- Organization as reported
- Myriad Genetic Laboratories, Inc., UT
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- April 1, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13478, row:4617)
- Archived copy
- Held in the private archive (provenance)
Myriad Genetic Laboratories (MGL), the covered entity (CE), reported that a workforce member mistakenly emailed a spreadsheet containing protected health information (PHI) to a patient. The PHI involved included names, telephone numbers, medical record numbers, treatment information, and claims information. The breach affected 1,719 individuals. MGL notified all affected individuals and OCR. The covered entity sanctioned the workforce member responsible for the breach. It revised its policy and implemented changes to protect sensitive data when using email communications. It re-trained all workforce members on the updated policy. In addition, the covered entity provided documentation that it has a security awareness and training program in place for all workforce members.