A privacy breach is a type of patient harm. Investigators collected a large volume of recycled paper waste from multiple hospitals and found protected health information that should have been disposed of in a more secure fashion. The authors suggest systems approaches to avoid privacy breaches related to paper medical records.