HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 11, 2017.
- Organization as reported
- LC&Z General and Cosmetic Dentistry, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- July 11, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14127, row:5266)
- Archived copy
- Held in the private archive (provenance)
On May 17, 2017, LC&Z General and Cosmetic Dentistry, the covered entity (“CE”), discovered it had experienced a breach when an unauthorized individual gained access to the CE’s email account, potentially exposing the names, dates of birth, addresses, email addresses, phone numbers, social security numbers, clinical and health insurance information of 4,391 individuals. The CE provided timely breach notification to HHS, to the affected individuals and to the media, and posted substitute notice on its website. At the time of the incident, the CE did not have a business associate (BA) agreement in place with its email service provider. In response to the breach, the CE entered into a BA agreement with the email service provider, implemented additional security measures to its email system, implemented a more secure platform to communicate with patients and transmit protected health information, and retrained its workforce on its HIPAA policies and procedures. OCR obtained assurances that the CE implemented the corrective actions listed above.