BreachScout BreachScout Breach Records

Regulator-posted notice

Breach notice filed by Texas Health and Human Services (June 2017)

Organization named: Texas Health and Human Services Provisional: identity as filed, not yet matched to the directory
Type as the source lists it: Improper Disposal

What the sources say

HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice

Posted on the HHS Office for Civil Rights breach portal with a submission date of June 15, 2017.

Organization as reported
Texas Health and Human Services, TX
Entity type as reported
Health Plan
Category as reported
Improper Disposal
Location of information as reported
Paper/Films
Submission date
June 15, 2017
Observed by BreachRecords
2026-10-18 16:15 UTC (revision 14165, row:5304)
Archived copy
Held in the private archive (provenance)

OCR conducted an investigation of the covered entity (CE), Texas Health and Humans Services Commission (HHSC), after it reported that a workforce member improperly discarded several boxes containing protected health information (PHI) into a public dumpster. After being unable to retrieve all of the discarded boxes, HHSC conducted a forensic analysis of the workforce member’s computer and determined that the workforce member had access to approximately 1,842 patient files (number of individuals affected by the breach). The protected health information (PHI) involved included names, addresses, dates of birth, social security numbers, financial information, and treatment information. Upon discovering the breach, HHSC conducted an internal investigation and sanctioned the workforce member involved. As a result of OCR’s investigation, HHSC retrained all employees on the proper disposal of PHI. and provided notification to the affected individuals and the media. HHSC offered one year of free credit monitoring services to all affected individuals.

The source's own words, from the revision above.

Figures, per source

  • 1,842 individuals affected (total reported), according to the HHS Office for Civil Rights breach portal, source date June 15, 2017, revision observed 2026-10-18.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

  • Submission date (HHS Office for Civil Rights breach portal)
  • Observed by BreachRecords (revision 14165)
  • Approved by a reviewer

Organizations linked by a reviewer

  • Texas Health and Human Services Named as the covered entity Provisional: identity as filed, not yet matched to the directory Linked 2026-10-19, method provisional.

Archived evidence

  • 3dbc27dd5742e041cc1e7fe18cc669e2901fbd3b86b7007ed27948ff4d406e1f
    text/csv, 5,530,996 bytes, retrieved from HHS Office for Civil Rights breach portal, 2026-10-18 16:15 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by Texas Health and Human Services (June 2017). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.