HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 20, 2024.
- Organization as reported
- Contents Trader, Inc., TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Network Server
- Submission date
- Aug. 20, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9742, row:881)
- Archived copy
- Held in the private archive (provenance)
Contents Trader, Inc. d/b/a Choice Specialty Pharmacy, the covered entity (CE), reported that on April 23, 2023, while updating its website, a third-party company unintentionally left open an access point containing 12,495 patients’ electronic protected health information (ePHI). The ePHI involved included names, addresses, dates of birth, and medications. In its mitigation efforts, the CE disabled the unauthorized access point and implemented additional administrative and technical safeguards. OCR provided technical assistance to the CE regarding the HIPAA Security Rule.