Colorado Department of Health Care Policy and Financing

On July 30 and September 3, 2014, a business associate of Colorado Department of Health Care Policy & Financing mistakenly sent postcards to approximately 15,380 clients containing viewable PHI, including names, addresses, and references to each client's status as a public assistance client receiving behavioral health care services. Following the breach, the CE and BA ceased postcard communications, implemented new policies and procedures, and conducted privacy training. OCR obtained assurances of corrective action. Breach reported to HHS on 2014-10-10. Breached information located in: Other.

Affected (this filing): 15,380