HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Feb. 24, 2016.
- Organization as reported
- ELLIOT J MARTIN CHIROPRACTIC PC, NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer
- Submission date
- Feb. 24, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14612, row:5751)
- Archived copy
- Held in the private archive (provenance)
An unauthorized user established a user account with administrative privileges on the covered entity's (CE) computer system which contained the electronic protected health information (ePHI) of 1,200 patients. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE ran malware detection software and reviewed software logs that showed activities from the CE's computer. The CE changed its Internet Protocol (IP) address, router, passwords and installed a physical firewall on its computer system. The CE also changed its policy so that it does not request or maintain patients’ Social Security numbers. OCR obtained assurances that the CE implemented the corrective actions listed. Additionally, the CE is expected to conduct a risk analysis, implement a corresponding remediation plan, and implement certain improvements to its processes regarding information system activity review and information access management.