HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 11, 2014.
- Organization as reported
- WA State Department of Social & Health Services, WA
- Entity type as reported
- Health Plan
- Category as reported
Other, Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Feb. 11, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15180, row:6319)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE) erroneously sent mail to 3,104 clients at incorrect addresses due to a coding error in an internal database. The protected health information (PHI) contained in the mailing may have included clients’ names, addresses, and client identification numbers, and some letters also included dates of birth, social security numbers, diagnoses, and financial information. The CE provided breach notification to HHS, affected individuals, and the media, and posted substitute notice on its website. Following the breach, the CE hired a firm to conduct an independent evaluation of the data breach to identify and correct the root causes of this incident. The CE formed a Quality Improvement Team to increase oversight of production and ensure that quality assurance processes are strictly followed. As a result of OCR’s investigation, OCR provided technical assistance on the timeliness of notifications and incident reporting and obtained assurances that the corrective actions listed above were completed.