Kaiser Foundation Health Plan (Kaiser), the covered entity (CE), reported that it had impermissibly disclosed protected health information (PHI) due to a flaw in its mail merge and quality assurance process. The breach affected 638 individuals. The PHI involved included names, medications prescribed, and health plan members. Following the breach, Kaiser strengthened its quality assurance process for mail merging and provided training on the revised process as well as refresher HIPAA training on protecting the privacy and security of PHI.
2026-09-25 · records: 638 to 4389 · backfill source
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 638 · backfill source
2026-09-25 · summary: empty to Kaiser Foundation Health Plan (Kaiser), the covered entity (CE), reported that it had impermissibly disclosed protected health information (PHI) due to a flaw in its mail merge and quality assurance process. The breach affected 638 individu · backfill source
2026-09-25 · disclosed: 2017-12-05 to 2017-08-31 · backfill source
2026-09-25 · disclosed: 2017-12-28 to 2017-12-05 · backfill source
