HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 17, 2015.
- Organization as reported
- University of California Irvine Medical Center, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- June 17, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14771, row:5910)
- Archived copy
- Held in the private archive (provenance)
The University of California Irvine Medical Center (UCI), the covered entity, reported that an employee impermissibly accessed the medical records of 4,859 patients between June of 2011 and March of 2015. The protected health information (PHI) involved included names, addresses, claims information, dates of birth, gender, medical record numbers, account numbers, and clinical information. UCI notified all affected individuals and the media. In addition, it revised its policies and procedures, sanctioned the workforce members involved, and re-trained all workforce members. In response to OCR’s investigation, UCI conducted a risk analysis and is in the process of completing a corresponding risk management plan.