HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 7, 2016.
- Organization as reported
- Indian Health Service Northern Navajo Medical Center, NM
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- April 7, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14566, row:5705)
- Archived copy
- Held in the private archive (provenance)
Indian Health Services, Northern Navajo Medical Center, the covered entity (CE), reported that an employee took protected health information (PHI) and stored it in a public storage unit without authorization. The breach affected 7,721 individuals, and the types of PHI involved in the breach included patients’ names, health record numbers, social security numbers, dates of birth, and health insurance policy numbers. The CE provided breach notification to HHS, affected individuals, and the media. It also notified law enforcement. OCR obtained documented assurances from the CE that it implemented improved administrative and technical safeguards, revised HIPAA policies and procedures, and retrained staff.