HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 18, 2016.
- Organization as reported
- Village of Oak Park, Illinois, IL
- Entity type as reported
- Health Plan
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Aug. 18, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14449, row:5588)
- Archived copy
- Held in the private archive (provenance)
The Village of Oak Park, Illinois (VOPI), a covered entity (CE), reported than an employee emailed spreadsheets which contained protected health information (PHI) to a personal email account. The breach affected approximately 688 individuals and the PHI involved included names, dates of birth, social security numbers, and health insurance information. Following the breach, the covered entity terminated the employee responsible for the breach incident. VOPI notified all affected individuals and prominent media outlets. It also posted notice on its website. The CE strengthened its capabilities to monitor email communications and incorporated spam and encryption technologies.