HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 5, 2018.
- Organization as reported
- University Of Missouri Health, MO
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 5, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13675, row:4814)
- Archived copy
- Held in the private archive (provenance)
Due to an incorrect mail merge, on June 8, 2018, the covered entity (CE) sent letters to 706 patients in the Ear, Nose, and Throat Clinic to the wrong addresses. The breached protected health information (PHI) included names, addresses, zip codes, and treatment information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE sanctioned and retrained the workforce members whose actions led to the breach. It also provided education on verifying the information contained in a spreadsheet and ensuring that any changes made to data received does not impact the integrity of the original data. The CE also advised responsible staff that the printing services department should be provided a pre-sorted spreadsheet for future mailings. OCR obtained documented assurances that the CE implemented the corrective actions noted above.