norm: oak street healthUSLEI 2549007CJE6GSEURLA30 · no CIKMax severity: Medium

Canonical registry

Oak Street Health

ent_b62dc95da5773610229fcb37

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

3,169

nationwide · HHS OCR IL

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Oak Street Health
Normalized: oak street health— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 2549007CJE6GSEURLA30
SEC EDGAR CIK: None — not an SEC registrant
Domain: oakstreethealth.com

Disclosure history (1)newest first

ILLINOISHHS OCRas victim2023-11-24
Oak Street Health (IL) reported to HHS on 2023-11-24 an Unauthorized Access/Disclosure affecting 3,169 individuals. A vendor employee mailed PHI — including names, birthdates, addresses, phone numbers, and health insurance and treatment information — to the wrong recipients. Breached information located on Paper/Films. The CE notified HHS, affected individuals, and the media, strengthened administrative safeguards, and terminated the vendor relationship.