HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of March 30, 2018.
- Organization as reported
- Sonoma County Indian Health Project, Inc, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer, Email
- Submission date
- March 30, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13873, row:5012)
- Archived copy
- Held in the private archive (provenance)
On March 8, 2018, a former workforce member sent an email containing the electronic protected health information (ePHI) of approximately 662 individuals to her personal email. The types of ePHI involved included demographic and clinical information. The covered entity (CE) provided breach notification to HHS, affected individuals, and the media. It also notified the State Attorney General and Department of Public Health and offered complimentary credit monitoring. The CE retrained all workforce members on the issues raised in the breach. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.