Back to the register

Washington State Department of Social and Health Services

ArchivedSubmitted 08/20/2020
State
WA
Covered entity type
Health Plan
Individuals affected
648
Business associate present
No
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Email
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

The covered entity (CE), Washington Department of Social and Health Services, reported that an employee sent an email containing the electronic protected health information (ePHI) of 648 individuals to the wrong recipients. The ePHI involved included names and email addresses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE strengthened its administrative safeguards to better protect its sensitive data. All staff were retrained.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.