A breach of Protected Health Information (PHI) is any unauthorized acquisition, access, use, or disclosure of PHI that compromises its security or privacy. HIPAA mandates notifications to affected individuals, the Secretary of Health and Human Services, and, in some cases, the media following such breaches.