HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 10, 2014.
- Organization as reported
- Virginia Premier Health Plan (VPHP), VA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- Jan. 10, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15210, row:6349)
- Archived copy
- Held in the private archive (provenance)
Virginia Premier Health Plan, a business associate (BA) of the covered entity (CE), Virginia Department of Medical Assistance Services (VA-DMAS), mailed incorrect postcards to Virginia Medicaid members. The breach included 13,357 postcards that were mailed to the wrong address and 12,156 postcards that contained incorrect services information. The information did not include social security numbers or financial information. The BA provided breach notification to HHS, the media, and to affected individuals in English and Spanish. Following this breach, the BA improved safeguards by retraining employees on safeguards for protected health information, updating procedures for mailings, and implementing additional quality control checks. OCR obtained assurances that the BA implemented the corrective action listed above.