Back to the register
Missouri Dept. of Mental Health
ArchivedSubmitted 02/21/2018
Updated 14 hours ago ()
- State
- MO
- Covered entity type
- Healthcare Provider
- Individuals affected
- 1,000
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Other
- First seen by InfoSec Signals
- Sep 23, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
The covered entity (CE), Missouri Dept. of Mental Health, erroneously mailed letters to family members of individuals receiving services, affecting 1,000 individuals. The protected health information (PHI) involved in the breach included consumers' names. Following the breach, the CE implemented additional safeguarding and quality control procedures for mailings. The CE provided notice of the breach to affected individuals, the media, and to HHS. As a result of OCR’s investigation, the CE updated its Breach Rule Notification policy, specifically to include information about reporting breaches that affected under 500 individuals. OCR obtained documented assurances that the CE implemented the corrective actions listed above.
Change history
- Sep 23, 2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.