HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 12, 2016.
- Organization as reported
- Pulaski County Special School District-Employee Benefits Division, AR
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- May 12, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14530, row:5669)
- Archived copy
- Held in the private archive (provenance)
An employee responsible for reconciling health insurance billing data at Pulaski County Special School District—Employee Benefits Division, the covered entity (CE), sent copies of the reconciliations for 2,602 individuals to her home email account before she resigned. The emails contained former and current employees’ health insurance records, which included names, social security numbers, disability reports, employee payroll deductions and Employee Benefits Division reports. The CE provided breach notification to HHS, affected individuals, and the media. It also notified local law enforcement. OCR provided technical assistance regarding the CE’s obligations under the Breach Notification Rule, and implementing HIPAA policies and procedures. In response to the breach, the CE informed OCR that it would implement additional technical safeguards and preventative measures.