HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 9, 2018.
- Organization as reported
- Cambridge Dental Consulting Group, NV
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- May 9, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13823, row:4962)
- Archived copy
- Held in the private archive (provenance)
OCR notified Cambridge Dental Consulting Group (CDCG), which performs corporate functions for Boston Dental Group Management LLC (BDG) and nineteen other dental practices that form an affiliated covered entity, that it received a complaint that BDG patients’ electronic protected health information (ePHI) was accessible to the public via its website. CDCG was using a website database with a function for internal use and storage of information regarding CDCG employees and patients which had inadvertently become publicly accessible. The accessible ePHI included the clinical, demographic and financial information of 3,758 CDCG patients. CDCG notified the affected individuals and the media, and submitted a breach report to OCR on May 9, 2018. OCR provided CDCG with substantial technical assistance regarding its compliance obligations under the Privacy, Security, and Breach Notification Rules. CDCG took numerous corrective actions to remedy the incident and formalize CDCG’s compliance program, including establishing additional technical and administrative safeguards and new policies and procedures.