HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 4, 2017.
- Organization as reported
- University of Oklahoma, OU Physicians, OK
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- April 4, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14224, row:5363)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), University of Oklahoma Health Sciences Center, reported that a resident physician set his university email to automatically forward to his personal email account. The protected health information (PHI) involved the names, medical information, dates of birth, and social security numbers for approximately 1,637 individuals. As a result of the breach, the CE improved safeguards, updated its policies and procedures, and trained its workforce members on better practices to protect PHI. Further, the CE provided breach notification to HHS, affected individuals, and the media. During the course of the investigation, OCR provided technical assistance, and the CE provided substitute notice to those individuals not notified. OCR obtained the notice to the media provided by the CE, and obtained assurances that the CE implemented the corrective actions listed in the response to OCR’s data request and the breach report.