HHS OCR report ยท 2019
Myriad Genetic Laboratories, Inc. data breach
OCR report facts
- Covered entity
- Myriad Genetic Laboratories, Inc.
- Entity type
- Healthcare Provider
- State
- Utah
- Individuals affected
- 1,719
- Submission date
- Apr 1, 2019
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Business associate present
- No
- Status
- Archive (closed)
OCR description
Myriad Genetic Laboratories (MGL), the covered entity (CE), reported that a workforce member mistakenly emailed a spreadsheet containing protected health information (PHI) to a patient. The PHI involved included names, telephone numbers, medical record numbers, treatment information, and claims information. The breach affected 1,719 individuals. MGL notified all affected individuals and OCR. The covered entity sanctioned the workforce member responsible for the breach. It revised its po...
Text as published on the HHS OCR breach portal.
Other reports by Myriad Genetic Laboratories, Inc.
| Covered entity | State | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|---|
| Myriad Genetic Laboratories, Inc. | UT | Healthcare Provider | 643 | Mar 29, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
Frequently asked questions
How many people were affected by the Myriad Genetic Laboratories, Inc. data breach?
The report to HHS OCR lists 1,719 individuals affected.
When was it reported to HHS?
It was submitted to HHS OCR on Apr 1, 2019.
What type of breach was it?
The OCR portal lists the type of breach as Unauthorized Access/Disclosure, with the breached information located in: Email.
Is the investigation still open?
No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.
Is a breach notice letter from Myriad Genetic Laboratories, Inc. legitimate?
This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.
Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Myriad Genetic Laboratories, Inc..