Berkeley Endocrine Clinic

Disclosed May 23, 20161,370 affectedConfirmed

The covered entity (CE) reported to OCR that it disclosed electronic protected health information (ePHI) when it inadvertently sent a notification to 1,370 individuals without blind copying the recipients. The ePHI involved in the breach included patients' first and last names and email addresses. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE revised administrative procedures for email communications, enhanced technical measures (including encryption for desktop computers), and retrained staff. OCR’s investigation resulted in the CE enhancing its practices for safeguarding ePHI.

What is known

People affected	1,370 (as reported to HHS)
Disclosed	May 23, 2016
Happened	Apr 22, 2016
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Berkeley Endocrine Clinic

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Berkeley Endocrine Clinic (Business Associate, CA)

Notices filed

Residents of CAMay 23, 2016

California AGCount not stated

TotalMay 24, 2016

HHS archive1,370 people

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 1370by backfillSource

summary2026-09-25

empty to The covered entity (CE) reported to OCR that it disclosed electronic protected health information (ePHI) when it inadvertently sent a notification to 1,370 individuals without blind copying the recipients. The ePHI involved in the breach inby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Berkeley Endocrine Clinic