HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 7, 2017.
- Organization as reported
- University of Wisconsin - Madison, WI
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Sept. 7, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14068, row:5207)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), the University of Wisconsin - Madison reported that employees mailed postcards containing the protected health information (PHI) of 1,000 individuals. The PHI involved included names, addresses, medications prescribed, and other clinical information. The CE provided breach notification to HHS, the media, and affected individuals. The CE also offered free identity protection services to all individuals affected by this breach incident, implemented additional administrative safeguards, and retrained its employees. The employees involved were sanctioned. OCR obtained assurances that the CE implemented the corrective actions noted.