HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 18, 2016.
- Organization as reported
- Lindsay House Surgery Center, LLC, NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- March 18, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14582, row:5721)
- Archived copy
- Held in the private archive (provenance)
A nurse anesthetist’s bag was stolen from her car, and among the contents of the bag were papers containing the protected health information (PHI) of 772 patients of the covered entity (CE), Lindsay House Surgery Center, LLC. The CE reported that the PHI included patients’ names, ages, medical procedures, dates of service, dates of birth, phone numbers, insurance information and social security numbers. The CE provided breach notification to HHS, the media, and the affected individuals, and posted notice on its website. Following the breach, the CE re-trained its workforce members, including the nurse anesthetists, on HIPAA. The CE also implemented new processes to enable the nurse anesthetists to view electronic PHI securely in the covered entity’s system, and prohibited the nurse anesthetists from removing paper records containing PHI from the CE. OCR obtained assurances that the CE implemented the corrective actions listed above.