HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 9, 2018.
- Organization as reported
- Anne Arundel Dermatology, P.A., MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- Aug. 9, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13725, row:4864)
- Archived copy
- Held in the private archive (provenance)
Burglars stole documents including patients’ protected health information (PHI) from a locked cabinet at Anne Arundel Dermatology, the covered entity (CE). The breach affected approximately 1,324 individuals and the types of PHI involved included names, addresses, bank account numbers, and clinical and diagnostic information. The CE provided reach notification to HHS, affected individuals, and the media. Following the breach, the CE implemented additional physical safeguards. OCR reviewed the CE's policies and procedures to ensure compliance with the Privacy and Security Rules.