HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 7, 2013.
- Organization as reported
- AssuranceMD f/k/a Harbor Group, PA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- May 7, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15411, row:6550)
- Archived copy
- Held in the private archive (provenance)
An unsecured hard drive containing the electronic protected health information (ePHI) of up to 22,000 individuals was lost in transit between Dr. Andrew F. Brooker's business associate, AssuranceMD, and a subcontracted electronic medical records storage company. The ePHI involved in the breach included patients' names, diagnoses/conditions, lab results, other clinical information and for some patients, addresses, dates of birth and/or social security numbers. Dr. Brooker provided breach notification to HHS and affected individuals. Following the breach he updated his HIPAA policies and procedures. OCR obtained assurances that the corrective action steps listed above were completed. Prior to completion of additional corrective actions, Dr. Brooker notified OCR that he had sold his private practice. \ \