HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 19, 2017.
- Organization as reported
- The Union Labor Life Insurance Company, MD
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Oct. 19, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14027, row:5166)
- Archived copy
- Held in the private archive (provenance)
On June 27, 2017, Union Labor Life Insurance, the covered entity (CE), discovered that an unauthorized user accessed an employee’s email account. The breach occurred when the employee received an email that purported to be from a trusted user, but contained a virus. The breach affected the protected health information (PHI) of 664 individuals, including social security numbers and clinical information. The CE provided breach notification to HHS, the affected individuals, and the media. Following the breach, the CE retrained staff on phishing and email security, and implemented additional technical safeguards in its email system. OCR obtained assurances that the CE implemented the corrective actions listed, and reviewed the covered entity’s risk analysis to ensure compliance with the Security Rule.