HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 7, 2010.
- Organization as reported
- Daniel J. Sigman MD PC, MA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Electronic Medical Record, Other, Other Portable Electronic Device
- Submission date
- Jan. 7, 2010
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 16115, row:7254)
- Archived copy
- Held in the private archive (provenance)
Computer backup tapes containing EPHI for the office practice management program including electronic medical records were stolen from the home of the practice manager on December 11, 2009. The breach affected approximately 1,860 patients. The protected health information on the tapes contained patients' names, addresses, telephone numbers, dates of birth, insurance information, social security numbers and medical record information. Following the breach, Sigman took the following voluntary corrective actions: (1) upgraded software application for backup security; implemented a new external backup system in case the server goes down; (2) encryption software was implemented for data contained on both its backup tapes and network storage device; (3) revised its security policy for transporting backup media; backup tapes must now be stored in a lockbox within a locked office in its facility; the revised policy also prohibits the movement of backup tapes from the facility as well as restricts access to the tapes to designated workforce; (4) employees were retrained on the policies and procedures in place and received training on the new policies and procedures for safeguarding backup tapes; (5) notified affected individuals and the media. \