Borgess Medical Center

Borgess Medical Center reported an impermissible disclosure of protected health information affecting 700 patients due to an error in a mail merge process on April 13, 2015. The breach resulted in the mixing of patient names and addresses, exposing their names, medications, and association with Borgess Rheumatology. In response, the center implemented a new data verification process, retrained workforce members, and added quality checks for spreadsheets with patient information.