HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 16, 2012.
- Organization as reported
- Molalla Family Dental, OR
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident, Other, Unauthorized Access/Disclosure
- Location of information as reported
- Network Server
- Submission date
- July 16, 2012
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15599, row:6738)
- Archived copy
- Held in the private archive (provenance)
The CE did not control access to the electronic protected health information (ePHI) of 4,354 individuals which was contained in the CE’s network-attached storage. Specifically, the CE’s firewall was set to allow access to a port that permitted anyone outside of CE’s firewall to access patient information. The ePHI involved in the breach included names, addresses, email addresses, dates of birth, patient intake sheets, invoices, dental charts, photos, x-rays, insurance information, credit card numbers, dates of birth, and social security numbers. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE closed access to the unsecured port, encrypted ePHI, upgraded operating system software on all workstations, implemented new firewall rules, installed a new server, set up automatic software patching and spyware removal, and deployed new virus and spam filters. The CE also retrained employees and implemented extensive policies and procedures, including new backup procedures for ePHI. OCR obtained assurances that the corrective actions were taken.