HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 20, 2016.
- Organization as reported
- Harrisonburg OB GYN Associates, P.C., VA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Electronic Medical Record
- Submission date
- Oct. 20, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14387, row:5526)
- Archived copy
- Held in the private archive (provenance)
Harrisonburg Obstetrics and Gynecology Associates, P.C., the covered entity (CE), reported that on August 11, 20, 2016, a physician and former president of the CE, printed out the protected health information (PHI) of approximately 800 patients prior to his resignation. The CE determined that the reports showed patients' names, account numbers, phone numbers, addresses, dates of service and reasons for the visits. At the time of OCR's review, the CE was in litigation for the return of the reports. The CE disabled all access to such reports except by a few employees with a business need. The CE provided breach notification to HHS, the media, and affected individuals. OCR obtained assurances that the CE implemented the corrective actions listed.