HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 22, 2014.
- Organization as reported
- Mercy Medical Center Redding - Oncology Clinic, Privacy Manager Breach, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Other
- Submission date
- Dec. 22, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14911, row:6050)
- Archived copy
- Held in the private archive (provenance)
On December 13, 2014, the covered entity (CE), Mercy Medical Center’s Redding Oncology Clinic, reported that electronic protected health information (ePHI) was accessible on the Internet when its business associate (BA), Write-Type, Inc., left the ePHI on its website. The website contained the ePHI of approximately 616 individuals and included names, addresses, medical record numbers, physicians’ names, and clinical information such as diagnoses, medications, lab reports, and other treatment information. The CE provided breach notification to HHS, affected individuals and the media. The CE revised its policies and procedures. OCR obtained assurances that the CE implemented the corrective actions noted above.