On May 6, 2016, during a move out of its Dubuque Health Center, Planned Parenthood of the Heartland (IA) mistakenly left a locked closet open containing patients' paper records, resulting in an unauthorized access/disclosure breach. PHI exposed included pregnancy tests, lab logs, and colposcopy documentation for approximately 2,506 individuals. The CE notified HHS, affected individuals, and the media. OCR obtained documented assurances of corrective actions, including workforce retraining.
Affected (this filing): 2,506