HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 19, 2014.
- Organization as reported
- David DiGiallorenzo, D.M.D., PA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident, Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- June 19, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15061, row:6200)
- Archived copy
- Held in the private archive (provenance)
An individual hacked into the Dentrix software of the covered entity (CE), Lanap & Implant Center of Pennsylvania (David DiGiallorenzo), and posted patients’ protected health information (PHI) on a “BitTorrent” website (which distributes files over the Internet), piratebay.com. The breach involved the PHI of 11,000 individuals and included names, as well as dates of birth and social security numbers for some of the individuals. The CE provided breach notification to HHS, affected individuals whose PHI was compromised, and the media, as well as substitute notification. Following the breach, the CE received security updates from Dentrix. As a result of OCR’s investigation, the CE increased safeguards by implementing security measures on its electronic systems.