HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 24, 2019.
- Organization as reported
- TriHealth Physician Practices, OH
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- May 24, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13393, row:4532)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), TriHealth Physician Practices, reported that an employee impermissibly disclosed the protected health information (PHI) of 2,433 patients to a student mentee who was not authorized to view PHI. The PHI involved included names, addresses, dates of birth, ethnicity, diagnoses/conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and established a hotline for all individuals affected who may have questions or concerns. In its mitigation efforts, the CE sanctioned the responsible employee and retrained its staff on the importance of protecting patient privacy. The CE also implemented additional administrative safeguards to better protect its data. OCR obtained assurances that the CE implemented the corrective actions noted.