Kaiser Foundation Health Plan of the Mid-Atlantic States

Due to a printing error, patients received appointment reminders containing other patients’ protected health information (PHI). The PHI involved in the breach included the names, medical record numbers, the types of appointments to be scheduled, and provider information for approximately 630 individuals. Following the breach, additional safeguards were implemented to prevent future disclosures. OCR reviewed the covered entity’s policies and procedures to ensure compliance with the Privacy and Security Rules.