HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Nov. 26, 2018.
- Organization as reported
- Baylor Scott & White Medical Center - Frisco, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Nov. 26, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13619, row:4758)
- Archived copy
- Held in the private archive (provenance)
An unauthorized third party obtained administrative-level credentials through a business associate (BA) of Baylor Scott & White Medical Center – Frisco, the covered entity (CE). The incident remained contained within the BA’s network and compromised the protected health information (PHI) of 39,850 individuals from September 22 through September 29, 2018. The types of PHI involved in the breach included demographic and financial information. The CE provided breach notification to HHS. Affected individuals, and the media. OCR’s investigation found that the CE maintained an updated BA agreement with its BA and that, upon learning about the breach, the CE discontinued its relationship with the compromised network, including terminating access to CE’s PHI.