Health Data Breach Tracker/IA

Health Plan · Archived

Iowa Department of Health and Human Services

833 individuals · submitted May 26, 2023

About this report

The covered entity (CE), Iowa Department of Health and Human Services, reported that an employee of its business associate (BA) inadvertently mailed the protected health information (PHI) of 833 individuals to the wrong recipients. The PHI involved included names, health insurance information, claims information, diagnoses, and other treatment information. The CE notified HHS, the media, and posted substitute notice on its website; the BA notified affected individuals. In response to the breach, the BA sanctioned the responsible employee and retrained its workforce on patient privacy and security.

Summary as published by the HHS Office for Civil Rights.

Organization
Iowa Department of Health and Human Services
State
IA
Entity type
Health Plan
Individuals affected
833
Submission date
May 26, 2023
Breach type
Unauthorized Access/Disclosure
Location of information
Paper/Films
Business associate present
Yes
OCR status
Archived

More breach reports in IA

More Unauthorized Access/Disclosure reports