HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 27, 2017.
- Organization as reported
- Advanced Spine & Pain Center, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Electronic Medical Record, Network Server
- Submission date
- Sept. 27, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14043, row:5182)
- Archived copy
- Held in the private archive (provenance)
On September 27, 2017, the covered entity (CE) notified OCR that an unauthorized individual accessed the CE's computer server, affecting 8,352 individuals' demographic, clinical, and healthcare payment information. The CE also provided breach notification to affected individuals and the media. To address the breach, the CE removed the server from its network and disabled the account created by the unauthorized individual. Additionally, the CE engaged a third party vendor to provide software patches, implemented periodic patch reports to ensure patches are consistent, and encrypted its wireless network and email. OCR provided technical assistance regarding the CE's risk analysis and risk management plan.