HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 9, 2017.
- Organization as reported
- Lifestyle Therapy & Coaching, AL
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Network Server
- Submission date
- Oct. 9, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14036, row:5175)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Lifestyle Therapy & Coaching, updated its website on June 16, 2017, inadvertently leaving an electronic form that could be used to search the CE’s client directory unsecured. A former client notified the CE of this problem on August 13, 2017, and the CE immediately secured the client information. The exposed directory contained names, addresses, telephone numbers, and email addresses for 551 individuals. In response to the breach and OCR's investigation, reviewed its safeguards for electronic protected health information, implemented additional access controls, and revised training procedures. The CE provided breach notification to HHS, affected individuals, the media and on its website. OCR obtained assurances that the CE implemented the corrective actions listed above.