Harris County Hospital District
Disclosed Feb 27, 20205,357 affectedConfirmed
The covered entity (CE), Harris County Hospital District dba Harris Health System, reported that an employee lost two envelopes containing the protected health information (PHI) of 2,298 individuals. The PHI involved included names, addresses, birthdates, Social Security numbers, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional administrative and physical safeguards to prevent future incidents of this nature.
What is known
| People affected | 5,357 (as reported to HHS) |
|---|---|
| Disclosed | Feb 27, 2020 |
| Discovered | Feb 10, 2021 |
| Happened | Jan 4, 2011 |
| Attack | Insider |
| Data exposed | NamesHealthSocial Security numbersInsuranceDates of birthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Harris County Hospital District
History of this record
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.