HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 6, 2017.
- Organization as reported
- Complete Wellness, MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- Jan. 6, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14306, row:5445)
- Archived copy
- Held in the private archive (provenance)
An employee lost a mobile computer drive resulting in a breach of protected health information (PHI) affecting 600 individuals. The types of PHI involved in the breach included names, addresses, dates of birth, social security numbers, and clinical information. Following the breach, the CE sanctioned the responsible employee, retrained employees about security awareness and implemented administrative and technical safeguards, including malware protection and encryption. As a result of OCR’s investigation, the CE completed a thorough risk analysis and developed a risk management plan.