HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 13, 2025.
- Organization as reported
- University of Michigan/Michigan Medicine, MI
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Aug. 13, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9189, row:328)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect PHI. Staff were retrained.