HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 10, 2014.
- Organization as reported
- New York City Health & Hospitals Corporation, NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Oct. 10, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14956, row:6095)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), New York City Health & Hospitals, discovered 198 boxes containing protected health information (PHI) in an employee parking garage of one of its facilities. The PHI included 10,058 patients’ names, addresses, dates of birth, social security numbers, financial information, diagnostic information, and other treatment information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, OCR conducted an investigation, and the CE relocated the boxes containing PHI to a private storage facility, revised its records management policies, retrained its workforce on its HIPAA practices, and implemented additional facility inspections to monitor compliance with its HIPAA Privacy and Security policies.