HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of March 9, 2018.
- Organization as reported
- inSite Digestive Health Care, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- March 9, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13900, row:5039)
- Archived copy
- Held in the private archive (provenance)
On January 23, 2018, the covered entity (CE), InSite Digestive Health, discovered that an unknown individual had broken into two on-site storage lockers used to store protected health information (PHI). The CE's investigation determined that the breach affected 1,424 patients' records and included patients’ demographic and clinical information. In response to the breach, the CE enhanced the security of its storage locker. In response to OCR’s investigation, the CE notified affected individuals and prominent media outlets, and began converting its paper medical records to a digital format.