Lake County Health Department and Community Health Center

The covered entity (CE), Lake County Health Department & Community Health Center, reported that a mailing error resulted in patients billing statements containing protected health information (PHI) being mistakenly mailed to incorrect recipients. According to the breach report, the breach affected approximately 981 individuals. The PHI involved names, other identifiers, and diagnoses/conditions. The CE notified HHS, the media, and the affected individuals. In its mitigation efforts, the CE revised its review processes to prevent a reoccurrence. OCR provided technical assistance to the CE regarding the HIPAA Rules.