HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 18, 2013.
- Organization as reported
- Jesle Kuizon, CA
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident, Theft, Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer, Network Server
- Submission date
- July 18, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15362, row:6501)
- Archived copy
- Held in the private archive (provenance)
Between October and November of 2011, employees of San Jose Medical Supply, Inc. (SJMS) impermissibly disclosed information regarding 800 SJMS patients. The information contained on Excel spreadsheets and prescriptions contained full names, addresses, zip codes, medical conditions, diagnoses, license numbers, physicians’ contact information, and dates prescriptions were obtained. SJMS initiated a forensics security investigation, identified the perpetrators of the breach, determined the recipients of the information, trained employees on HIPAA regulations and patient information security procedures, and filed a lawsuit against Front Medical Supply and the individual perpetrators. SJMS provided breach notification to the California Attorney General, the Secretary of HHS, the affected individuals, and the media. SJMS enhanced computer security protection and protocols to ensure that patient information is protected from unauthorized access, sanctioned responsible workforce members, and updated policies and procedures. OCR determined that SJMS is not a covered entity.