HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 18, 2012.
- Organization as reported
- Coastal home Respiratory, LLP, GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other
- Submission date
- Oct. 18, 2012
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15557, row:6696)
- Archived copy
- Held in the private archive (provenance)
Computers containing the electronic protected health information (ePHI) of 3,440 patients were stolen from the covered entity (CE), Coastal Home Respiratory, during a burglary. The ePHI included names, addresses, phone numbers, insurance identification numbers, social security numbers, and diagnoses. The computers were password protected and the data was encoded. The CE promptly notified law enforcement and provided breach notification to affected individuals, HHS, and the media. Following the breach, the CE cancelled access passwords for patient data, and changed patient data software to a server based system that is password protected and encrypted. The CE's billing software vendor changed the CE's account numbers to prevent unauthorized access to the ePHI. The CE improved physical safeguards by installing a new alarm system. Following OCR's investigation, the CE also improved safeguards for PHI by implementing new procedures for activity reports, audit logs, and security reports.