HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 14, 2015.
- Organization as reported
- Maricopa Special Health Care District - Maricopa Integrated Health System, AZ
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- July 14, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14755, row:5894)
- Archived copy
- Held in the private archive (provenance)
A medical resident lost an unencrypted thumb drive that contained the names, dates of birth, and clinical information or diagnoses of 633 patients selected for a chart review. The covered entity (CE), Maricopa Integrated Health System, provided breach notification to HHS, affected individuals, and the media. In response to the breach, the CE comprehensively reviewed its privacy and security practices and updated its HIPAA policies and procedures. It sanctioned and retrained the medical resident and retrained other workforce members on its HIPAA security procedures. OCR’s investigation resulted in the covered entity improving its HIPAA practices.