HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 20, 2014.
- Organization as reported
- NRAD Medical Associates, P.C., NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident, Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer, Other Portable Electronic Device
- Submission date
- June 20, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15060, row:6199)
- Archived copy
- Held in the private archive (provenance)
NRAD Medical Associates, the covered entity (CE), reported that an employee impermissibly downloaded 96,998 patients’ protected health information (PHI) onto a desktop computer and a personal external hard drive. The PHI included patients’ names, addresses, dates of birth, dates of service, social security numbers, procedure and diagnosis codes. The CE provided breach notification to HHS, affected individuals, and the media. During OCR’s investigation, the CE sanctioned a physician and filed for Chapter 11 bankruptcy. The CE transferred all of its assets to another imaging group and hospital. Ultimately, the CE ceased its operations and thus was no longer covered by the HIPAA Rules.