HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 5, 2016.
- Organization as reported
- Napa Valley Dentistry, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other
- Submission date
- Oct. 5, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14400, row:5539)
- Archived copy
- Held in the private archive (provenance)
Napa Valley Dentistry (NVD), the covered entity (CE), discovered that an unencrypted server that contained electronic protected health information (ePHI) had been stolen from its offsite storage unit. The breach affected 4,262 individuals and the ePHI involved included names, dates of birth, social security numbers, addresses, and financial information. In response to the breach, NVD performed a risk analysis, executed a corresponding risk management plan, and implemented several updates to its policies and procedures. In response to OCR’s investigation, NVD provided additional training to the staff members pertaining to the HIPAA Privacy, Security, and Breach Notification Rules.