HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 8, 2018.
- Organization as reported
- Oklahoma Department of Human Services, OK
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 8, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13668, row:4807)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Oklahoma Department of Human Services, reported that it inadvertently issued client notice letters with a second, unrelated client’s name and address due to a software change, affecting 813 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE developed and deployed a solution that stopped incorrect information from being added to the notice letters provided to clients. OCR obtained assurances that the CE implemented the corrective action steps noted above.