HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Sept. 9, 2015.
- Organization as reported
- Oakland Family Services, MI
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Sept. 9, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14717, row:5856)
- Archived copy
- Held in the private archive (provenance)
On July 14, 2015, the covered entity (CE), Oakland Family Services, discovered that an unauthorized individual remotely gained access to an employee’s email account containing the protected health information (PHI) of 16,107 individuals. The types of PHI potentially viewed included clinical and demographic information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE immediately terminated the hacker’s access to the email account, improved safeguards by implementing a new email solution that provides more protections for passwords, and trained employees on HIPAA and IT security. OCR obtained documented assurances that the CE implemented the voluntary corrective action steps listed above.