The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect PHI. Staff were retrained.
2026-09-25 · disclosed: 2024-09-26 to 2024-07-19 · backfill source
2026-09-25 · records: 1015 to 57891 · backfill source
2026-09-25 · disclosed: 2025-08-13 to 2024-09-26 · backfill source
2026-09-25 · records: 551 to 1015 · backfill source
2026-09-25 · disclosed: 2026-05-01 to 2025-08-13 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. Th · backfill source
