HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 15, 2018.
- Organization as reported
- LifeBridge Health, Inc, MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- May 15, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13815, row:4954)
- Archived copy
- Held in the private archive (provenance)
During an investigation of a malware attack on its computer server that hosts its electronic medical records, in March of 2018, the covered entity (CE) discovered that an unauthorized person accessed the server on September 27, 2016. The breach affected approximately 538,127 individuals and the types of protected health information (PHI) involved included demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE implemented its policies and procedures for contingency planning, data backup, disaster recovery, and emergency mode operations. OCR reviewed the CE's policies and procedures to ensure compliance with the Privacy and Security Rules. Following the breach, the CE implemented increased password controls. OCR obtained assurances that the CE implemented the corrective actions stated.