HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 21, 2018.
- Organization as reported
- Echo Canyon Healthcare, Incorporated dba Heritage Court Post Acute of Scottsdale, AZ
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- May 21, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13809, row:4948)
- Archived copy
- Held in the private archive (provenance)
On March 22, 2018, the covered entity (CE) discovered that a locked storage area was burglarized that contained boxes with old invoices containing protected health information (PHI), potentially affecting approximately 1,765 individuals. The types of PHI included demographic and clinical information, and for 24 individuals, pictures, social security numbers, Medicare numbers and financial information. The CE provided breach notification to HHS, affected individuals, and the media and also posted notice on its website, provided a dedicated a telephone number and email address for additional information about the breach, and offered complimentary credit monitoring for the individuals with financial information potentially disclosed. The CE provided onsite HIPAA training to all the workforce members on the issues raised in the breach. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.