HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 21, 2023.
- Organization as reported
- Absolute Dental Services, NC
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Aug. 21, 2023
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10498, row:1637)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), Absolute Dental Services, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of 10,037 individuals. The PHI involved included names, dates of birth, diagnoses and conditions, full face photos, and treatment information. The BA provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its website. In response to the breach, the BA implemented multi-factor authentication for all email accounts, increased password complexity requirements, and implemented procedures for clients to send PHI to the BA using a secure file share or secure portal, rather than email.