HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 28, 2021.
- Organization as reported
- K&B Surgical Center LLC, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer, Electronic Medical Record, Network Server
- Submission date
- July 28, 2021
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11978, row:3117)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), K&B Surgical Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 14,774 individuals. The ePHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, addresses, diagnoses, medications prescribed, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring and identity theft protection services. In response to the breach, the CE disabled its network, secured its systems, hired an IT forensic firm to investigate the breach, retrained workforce members, and implemented additional technical safeguards.