Missouri Dept. of Mental Health
Disclosed Feb 21, 20188 years ago1,000 affectedConfirmed
The covered entity (CE), Missouri Dept. of Mental Health, erroneously mailed letters to family members of individuals receiving services, affecting 1,000 individuals. The protected health information (PHI) involved in the breach included consumers' names. Following the breach, the CE implemented additional safeguarding and quality control procedures for mailings. The CE provided notice of the breach to affected individuals, the media, and to HHS. As a result of OCR’s investigation, the CE updated its Breach Rule Notification policy, specifically to include information about reporting breaches that affected under 500 individuals. OCR obtained documented assurances that the CE implemented the corrective actions listed above.
What is known
| People affected | 1,000 (as reported to HHS) |
|---|---|
| Disclosed | Feb 21, 2018 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Missouri Dept. of Mental Health (Healthcare Provider, MO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Feb 21, 2018 | 1,000 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.