HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 12, 2017.
- Organization as reported
- Madison Street Provider Network, CO
- Entity type as reported
- Business Associate
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- April 12, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14220, row:5359)
- Archived copy
- Held in the private archive (provenance)
Individual(s) broke into the offices of the covered entity (CE), Madison Street Provider Network (doing business as Spivack Vision Center), and searched the locked cabinets and drawers inside the facility’s medical records room. The CE found no evidence that any medical records were taken or disturbed during the break-in. The breach affected 9,129 individuals. The CE provided breach notification to HHS, affected individuals, and the media. The CE investigated the incident and mitigated the effects of the breach by providing identity repair and credit monitoring services to affected individuals for one year. In addition, the CE removed all paper medical records from the office location, securely disposed of certain records, and stored the remaining paper records in an off-site, secure storage facility. OCR provided the CE with technical assistance during the investigation, reminding it to ensure it has a business associate agreement in place with the secure storage facility.