HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 22, 2017.
- Organization as reported
- Our Lady of the Angels Hospital, LA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- Sept. 22, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14048, row:5187)
- Archived copy
- Held in the private archive (provenance)
A workforce member impermissibly accessed the protected health information (PHI) of approximately 1,140 patients for more than three years. The types of PHI involved in the breach included clinical, demographic, and financial information. Following the breach, the covered entity (CE) notified HHS, affected individuals, and the media and provided free credit monitoring for a year. As a result of OCR’s investigation, the CE sanctioned the workforce member involved, implemented a system for monitoring workforce members’ access to PHI, retrained its workforce members on the Privacy and Security Rules, and updated its risk analysis and risk management plan. Further, the CE updated and modified its substitute notice and media notice concerning the breach. OCR provided technical assistance and obtained assurances that the CE implemented the corrective actions noted above.