HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 21, 2018.
- Organization as reported
- SEIU Local 32BJ, District 36 Building Operators Welfare Trust Fund, PA
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Dec. 21, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13588, row:4727)
- Archived copy
- Held in the private archive (provenance)
An employee of Express Scripts, a business associate (BA), inadvertently sent an email intended for the covered entity (CE) to another multi-employer health and welfare fund. The breach included the protected health information (PHI) of 911 individuals, including names, telephone numbers, social security numbers, dates of birth, and prescription information. The CE provided breach notification to HHS, affected individuals, and the media and provided credit monitoring to individuals. Following the breach, the CE ensured that the BA retrained the responsible employee. Additionally, OCR reviewed the CE’s risk analysis to ensure compliance with the Security Rule. The CE no longer does business with the BA.