HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 7, 2020.
- Organization as reported
- Danube River Holdings LLC dba RiverPointe Post Acute, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- June 7, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12852, row:3991)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Danube River Holdings, LLC, dba RiverPointe Post Acute, reported that a USB flash drive containing the electronic protected health information (ePHI) of 633 individuals was lost in the mail. The ePHI involved included names, health insurance information, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, and the media. Upon discovery of the breach, the CE worked with the USPS to investigate the incident and confirm that the USB device was lost. The CE offered complimentary credit monitoring and identity theft monitoring services to affected individuals. In its mitigation efforts, the CE sanctioned the responsible employee and retrained its employees on safeguarding ePHI. During the investigation, OCR provided the CE with technical assistance.