HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 22, 2011.
- Organization as reported
- HITS Scanning Solutions, Inc., MO
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Other
- Submission date
- Oct. 22, 2011
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15753, row:6892)
- Archived copy
- Held in the private archive (provenance)
The covered entity's (CE) business associate (BA) shipped microfilm records containing protected health information (PHI) of 7,059 workforce members. The microfilm was lost in transit and not recovered. The PHI included clinical information, diagnoses, names, addresses, zip codes, date of births, social security numbers, driver's license numbers, and other identifiers. Following the breach, the CE changed its procedures, requiring PHI to be shipped via a new mail carrier that requires a confirmation signature upon receipt and allows for the tracking of packages. As a result of OCR's investigation the CE retrained its employees on its HIPAA policies and procedures.