HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 21, 2013.
- Organization as reported
- Elbowoods Memorial Health Center, ND
- Entity type as reported
- Health Plan
- Category as reported
Improper Disposal
- Location of information as reported
- Desktop Computer, Other, Other Portable Electronic Device, Paper/Films
- Submission date
- Aug. 21, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15341, row:6480)
- Archived copy
- Held in the private archive (provenance)
On or about October 1, 2011 contractors discovered abandoned protected health information (PHI) at the Mandan, Hidatsa, and Arikara Nations’ Minne-Tohe facility. Materials included cardboard boxes, file cabinets, and binders containing printed PHI; pharmaceutical bags containing printed PHI on medication containers in a caged area with a broken or open padlock; and twelve (12) computer towers, three (3) mini-sized computers, and a lap-top hard drive containing electronic PHI. The covered entity (CE), discovered an additional binder of PHI on May 15, 2013. The CE estimated that 10,000 individuals’ PHI was stored at Minne-Tohe prior to a move to the Elbowoods Memorial Health Center facility. OCR provided the CE with substantial technical assistance. As a result of OCR’s investigation, the CE relocated the stored materials to its new facility, conducted a risk analysis, developed a risk management plan, and developed policies and procedures to safeguard PHI.