Skip to content
Network USA

HHS OCR report ยท 2016

Ohio Department of Mental Health and Addiction Services data breach

Ohio Department of Mental Health and Addiction Services, a healthcare provider in Ohio, reported a breach affecting 59,000 individuals to HHS OCR on Apr 22, 2016.

OCR report facts

Covered entity
Ohio Department of Mental Health and Addiction Services
Entity type
Healthcare Provider
State
Ohio
Individuals affected
59,000
Submission date
Apr 22, 2016
Type of breach
Unauthorized Access/Disclosure
Location of breached information
Paper/Films
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), Ohio Department of Mental Health and Addiction Services, reported that postcards containing protected health information (PHI) were mailed to patients and/or their families. The PHI involved included names, addresses, and treatment information. The postcards were mailed to approximately 54,000 individuals. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE halted further mailings of postcards containing sensitive informatio...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Ohio Department of Mental Health and Addiction Services data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Ohio Department of Mental Health and Addiction Services legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Ohio Department of Mental Health and Addiction Services.