HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 24, 2017.
- Organization as reported
- Brevard Physician Associates, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Desktop Computer
- Submission date
- Oct. 24, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14021, row:5160)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Brevard Physician Associates, reported a breach when three computers were stolen from its facility. One of the computers contained protected health information (PHI) for 7,976 individuals. The PHI included names, clinical information, and insurance information. The CE provided breach notification to HHS, affected individuals, media, and posted substitute notice on its website. During the course of the investigation, the CE initiated procedures to remotely wipe the contents of the stolen computer’s hard drives once they connect to the Internet. The CE pledged to begin encrypting data at rest on all of their computers. The CE also installed a number of additional physical safeguards such as surveillance cameras and locks to deter and prevent unauthorized access. OCR obtained the policies and procedures from the CE concerning its access controls, and other administrative, physical and technical safeguards.