HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 14, 2016.
- Organization as reported
- Laser & Dermatologic Surgery Center, MO
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- June 14, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14499, row:5638)
- Archived copy
- Held in the private archive (provenance)
An unauthorized user accessed the covered entity's (CE) computer server several times between March 1, 2016, and March 21, 2016. The server contained patients’ names, addresses, dates of birth, and social security numbers affecting approximately 31,000 individuals. The CE, Laser & Dermatologic Surgery Center, provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE implemented firewall lockdowns that prevented external access into its computer network and decommissioned all of its breached electronic systems. The CE also completed additional network segmentation by creating a new domain and network, then wiped and rebuilt computer workstations and moved them to a secure network. The CE also trained staff on its Security Awareness policies and procedures. OCR obtained assurances that the CE implemented the corrective actions noted above.