HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 22, 2016.
- Organization as reported
- Ohio Department of Mental Health and Addiction Services, OH
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- April 22, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14547, row:5686)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Ohio Department of Mental Health and Addiction Services, reported that postcards containing protected health information (PHI) were mailed to patients and/or their families. The PHI involved included names, addresses, and treatment information. The postcards were mailed to approximately 54,000 individuals. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE halted further mailings of postcards containing sensitive information. The CE also adopted additional administrative safeguards to further protect its PHI and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.