HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 27, 2018.
- Organization as reported
- AccuDoc Solutions, Inc., NC
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Nov. 27, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13617, row:4756)
- Archived copy
- Held in the private archive (provenance)
A business associate (BA), AccuDoc Solutions, Inc., discovered on September 29, 2018, that an unauthorized user had gained access to a web server which contained the electronic protected health information (ePHI) for seven of its covered entity (CE) clients, affecting 2,652,537 individuals. While no data was exfiltrated, the ePHI that was potentially exposed included demographic information, account balances, and insurance policy information. In response to the breach, the BA terminated the unauthorized user’s access and improved technical safeguards. The CEs provided breach notification to affected individuals and the media. The BA provided breach notification to HHS on behalf of six out of seven CE clients. One CE notified HHS on its own. OCR obtained assurances that the BA implemented the corrective actions listed.