HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 15, 2023.
- Organization as reported
- Monocacy Valley Dental, MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Aug. 15, 2023
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10520, row:1659)
- Archived copy
- Held in the private archive (provenance)
Monocacy Valley Dental, the covered entity (CE) reported that a former employe stole a laptop that contained the protected health information (PHI) of 4,000 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, financial information, medications, lab results, and diagnoses. The CE notified HHS and the impacted individuals. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. The business associate (BA), Prime Therapeutics, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 6,050 individuals. The PHI involved included names, addresses, dates of birth, member identification numbers, and medications. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.