Back to the register

University of Alabama at Birmingham School of Nursing

ArchivedSubmitted 07/26/2024
State
AL
Covered entity type
Healthcare Provider
Individuals affected
1,655
Business associate present
No
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Paper/Films
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

The covered entity (CE), University of Alabama at Birmingham School of Nursing, reported that workforce members sent a postcard containing the protected health information (PHI) of 1,655 individuals, which was visible. The PHI involved included names, addresses, diagnoses/conditions, and location of treatment. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, The CE sanctioned the responsible staff and implemented additional administrative safeguards.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.

University of Alabama at Birmingham School of Nursing (AL), 07/26/2024 | InfoSec Signals