HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 5, 2020.
- Organization as reported
- Yale New Haven Health Services, CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- June 5, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12853, row:3992)
- Archived copy
- Held in the private archive (provenance)
Yale New Haven Health Services, the covered entity (CE), reported that the electronic protected health information (ePHI) of 506 individuals, related to COVID-19 testing, was exported from one computer system to another, which intertwined patient information with employee information allowing unauthorized individuals access to this medical information. The ePHI involved included names, birth dates, medical record numbers, telephone numbers, clinical information, and treatment information. The CE notified HHS, affected individuals, and provided a complimentary phone number for questions or concerns. In its mitigation efforts, the CE retrained its staff in an effort to prevent incidents of this nature in the future.