Walmart, Inc.

About this report

Wal-Mart Stores, Inc., the covered entity (CE), reported that the electronic protected health information (ePHI) of 735 individuals was disclosed when an internal error affected their pharmacy account profiles, causing ePHI to be viewable by another patient or his/her authorized representative when accessing his/her online pharmacy account or if he/she requested a copy of his/her record. The information disclosed included patients’ name, contact information, dates of birth, card holder insurance number, and some prescription history. The CE provided breach notification to HHS, affected individuals, and the media. As a result of OCR's investigation, the CE provided evidence it implemented improved administrative safeguards and quality assurance protocols to prevent similar incidents.

Summary as published by the HHS Office for Civil Rights.