HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 14, 2017.
- Organization as reported
- Compassion Care Hospice Las Vegas, LLC, NV
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Dec. 14, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13970, row:5109)
- Archived copy
- Held in the private archive (provenance)
On October 28, 2017, the covered entity (CE), Compassion Care Hospice Las Vegas, LLC, discovered that an unknown individual gained access to its computer network and server containing 1,128 patients' protected health information (PHI), specifically demographic and clinical information. Although there was no evidence of access to or exfiltration of PHI, the CE could not rule out that PHI was at risk of compromise. Out of an abundance of caution, the CE provided breach notification to HHS, affected individuals, and the media. Following the incident, the CE changed all administrator and user credentials to its computer system, enabled intrusion prevention software and blocked all suspicious internet protocol (IP) addresses, disabled and removed all remote connection software, blocked its public IP address so that it could no longer receive inbound connections, and took both servers offline permanently. OCR obtained assurances that the CE implemented the corrective actions noted above.