- State
- WV
- Covered entity type
- Healthcare Provider
- Individuals affected
- 4,882
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Paper/Films
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
On February 13, 2019, a misalignment of a printing process by a business associate (BA), Xerox, caused patient laboratory results to be mailed to the wrong patients, affecting 4,882 individuals’ demographic and clinical information. Following the breach, the BA and CE agreed on a their respective responsibilities, and the BA implemented a detailed quality control process for each level of the print operation. The CE reviewed its most recent risk assessment and updated it accordingly. OCR reviewed the breach notification provided to the affected individuals, as well as the security measures implemented to address risks and vulnerabilities. OCR obtained assurances that the CE implemented the corrective actions listed.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.