HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 6, 2018.
- Organization as reported
- Chesapeake Regional Medical Center, VA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- April 6, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13867, row:5006)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Chesapeake Regional Medical Center, reported that two external computer hard drives were stolen from its Sleep Center. The breach included the protected health information (PHI) of 2,111 individuals and included names, dates of birth, medical record numbers, and clinical information. OCR reviewed the covered entity’s policies to ensure compliance with the Privacy and Security Rules. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE implemented additional physical safeguards and conducted a new assessment of all external storage devices. OCR obtained assurances that the CE implemented the corrective actions listed above.