Southwest Oregon IPA
Disclosed Sep 18, 20188 years ago1,449 affectedConfirmed
On or about July 21, 2017, or July 25, 2018, the covered entity (CE), Southwest Oregon IPA, sent open-faced postcard to 1,449 plan members asking them to return the free colon cancer test that the plan sent to them one month prior. The postcards contained members’ names, addresses, PCP clinics, and requests to send back the tests. The CE provided breach notification to HHS, affected individuals, and the media. As a result of OCR’s investigation, the CE provided OCR information that it implemented a document control process. The CE ceased using postcards for member mailings and updated its HIPAA Privacy Manual to reflect the changes. OCR obtained assurances that the CE implemented the corrective actions listed here.
What is known
| People affected | 1,449 (as reported to HHS) |
|---|---|
| Disclosed | Sep 18, 2018 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Southwest Oregon IPA (Health Plan, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 18, 2018 | 1,449 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.