HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 16, 2018.
- Organization as reported
- David S. Ng, O.D., CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- June 16, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13780, row:4919)
- Archived copy
- Held in the private archive (provenance)
On June 16, 2018, the covered entity (CE), Dr. David Ng, reported that an unidentified individual broke into his office and stole a number of items, including a portable computer drive (i.e., a USB thumb drive). The stolen drive contained protected health information (PHI), including names, addresses, dates of birth, social security numbers, health claim information, and medical records relating to 758 patients. The CE provided breach notification to HHS, affected individuals, and the media and offered identity theft protection services to the affected individuals. In response to the breach, the CE changed all relevant passwords, adopted an encrypted storage method for patient’s PHI, and retrained workforce members. The CE also provided OCR with additional documentation including its HIPAA Notice of Privacy Practices policy, as relevant to this breach investigation. OCR obtained assurances that the CE implemented the corrective actions listed above.