HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 6, 2019.
- Organization as reported
- Rural Health Access Corporation dba Coalfield Health Center, WV
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Sept. 6, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13238, row:4377)
- Archived copy
- Held in the private archive (provenance)
Rural Health Access Corporation DBA Coalfield Health Center, the covered entity (CE), reported that its business associate (BA), Quality Insights, was sharing protected health information (PHI) as part of a quality improvement program with the WV Department of Health and Human Resources Bureau for Public Health. The CE discovered that the PHI was uploaded without being de-identified. The CE also discovered that there was no business associate agreement between Quality Insights and the WV Department of Health and Human Resources Bureau for Public Health. This breach affected 874 individuals and the PHI involved included names, addresses, and treatment information. Of note, the PHI was destroyed by the recipient. The CE notified HHS, affected individuals, and the media.