Wisconsin Department of Corrections

The Wisconsin Department of Corrections, the covered entity (CE), reported that it inadvertently sent protected health information (PHI) to entities not authorized to receive it. This breach affected 1,041 individuals and the PHI involved included identification numbers and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented administrative safeguards and trained its staff on patient privacy protections. OCR obtained assurances that the CE implemented the corrections actions noted.