HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 12, 2017.
- Organization as reported
- Midland County Hospital District d/b/a Midland Memorial Hospital, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Dec. 12, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13973, row:5112)
- Archived copy
- Held in the private archive (provenance)
Midland Memorial Hospital, the covered entity (CE), experienced an email phishing attack. The protected health information (PHI) affected by the attack included the names, account and medical record numbers, and treatment information of approximately 1,160 individuals. Upon discovering the breach, the CE took steps to immediately disable affected email accounts. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE improved technical safeguards and retrained staff. OCR obtained assurances that the CE implemented the corrective actions listed.