Group Health Cooperative

Disclosed Oct 3, 20131,015 affectedConfirmed

The CE sent an erroneous mailing to 1,105 individuals which displayed protected health information (PHI) in the address window of the envelope. The PHI involved in the breach included patients’ names, medical record numbers, diagnoses, and addresses. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE reviewed, updated and implemented applicable procedures to correct the causes of this incident. In response to OCR’s investigation, CE provided documentation of the corrective actions taken.

What is known

People affected	1,015 (as reported to HHS)
Disclosed	Oct 3, 2013
Attack	Not stated
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Group Health Cooperative (Healthcare Provider, WA)

Notices filed

TotalOct 3, 2013

HHS archive1,015 people

Other breaches at Group Health Cooperative

Lost or stolen device breachLost or stolen device, data exposed not stated. Reported to the Washington AG.HealthcareUSSep 23, 2016

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Group Health Cooperative