Brandywine Counseling & Community Services

Disclosed Apr 10, 202011,852 affectedConfirmed

The covered entity (CE), Brandywine Counseling & Community Services, Inc., reported that its business associate (BA) impermissibly mailed the protected health information (PHI) of 4,139 individuals to the wrong recipients, due to its processing errors. The PHI involved included names and treatment information. In its mitigation efforts, the CE revised its policies and procedures to prevent future processing errors. OCR obtained assurances that the CE implemented the corrective action noted.

What is known

People affected	11,852 (as reported to HHS)
Disclosed	Apr 10, 2020
Discovered	Feb 13, 2020
Happened	Jan 29, 2020
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Brandywine Counseling & Community Services

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Brandywine Counseling & Community Services (Healthcare Provider, DE)

Notices filed

Residents of DEApr 10, 2020

Delaware DOJ3,022 people

TotalApr 10, 2020

HHS archive11,852 people

TotalJul 17, 2020

HHS archive4,139 people

History of this record

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

4267 to 11852by backfillSource

attack2026-09-25

unknown to insiderby backfillSource

summary2026-09-25

empty to The covered entity (CE), Brandywine Counseling & Community Services, Inc., reported that its business associate (BA) impermissibly mailed the protected health information (PHI) of 4,139 individuals to the wrong recipients, due to its procesby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.

Everything about Brandywine Counseling & Community Services