HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 1, 2017.
- Organization as reported
- Adult Internal Medicine of North Scottsdale, AZ
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Sept. 1, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14076, row:5215)
- Archived copy
- Held in the private archive (provenance)
On July 5, 2017, a third party, identified as an online reporter, contacted the covered entity (CE), Adult Internal Medicine of North Scottsdale, claiming to have received demographic information for ten (10) patients from a computer hacker. While the CE was provided information that only 10 patients’ protected health information (PHI) had been breached, in an abundance of caution, the CE provided breach notification to all 11,778 patients and provided free credit monitoring. It also notified HHS and the media. The breached PHI included patients’ names, addresses, dates of birth, and social security numbers. The CE hired a cybersecurity contractor to provide 24/7 monitoring of its information technology system for unusual activity and implemented appropriate safeguards. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.