HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 23, 2016.
- Organization as reported
- Waiting Room Solutions Limited Liability Limited Partnership, NY
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Dec. 23, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14318, row:5457)
- Archived copy
- Held in the private archive (provenance)
Waiting Room Solutions (WRS), the business associate (BA), found a programming error in its IT system where patients’ billing statements were erroneously emailed to other patients. The breach incident affected 701 patients and the protected health information (PHI) involved included names, medical record numbers, addresses, dates of visits, claims information, and billing and financial information. The business associate provided notice to HHS and to all of the affected individuals. Following the breach, WRS corrected the programming error and added additional quality checks to ensure that an incident like this does not occur in the future. OCR obtained assurances that the covered entity implemented the corrective actions noted above.