HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 3, 2011.
- Organization as reported
- Ankle + Foot Center of Tampa Bay, Inc., FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Network Server
- Submission date
- Jan. 3, 2011
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15916, row:7055)
- Archived copy
- Held in the private archive (provenance)
The covered entity's (CE) network server, containing the electronic protected health information (ePHI) of 136,000 patients, was hacked. The types of ePHI involved in the breach were demographic and clinical information, including diagnoses and other treatment data. Following the breach, the CE hired a third party vendor to resolve a data crash and to create a data back-up plan in order to restore office functioning. To implement adequate safeguards, the CE also employed a cloud service with increased security as the new network server. Additionally, the CE contacted the local FBI office to assist with the CE's internal investigation of the breach and provided breach notification to all affected individuals, the media, and HHS. As a result of OCR's investigation, the CE developed and implemented new protocols to comply with the Security Rule. In addition, the CE provided and initiated new trainings for its staff, completed hiring of a new network vendor, implemented a new electronic health records system, and accounted for the disclosures in the affected individuals' medical records.