HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 15, 2016.
- Organization as reported
- Oneida Tribe of Indians of Wisconsin, WI
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Desktop Computer, Other Portable Electronic Device
- Submission date
- April 15, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14557, row:5696)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Oneida Tribe of Indians of Wisconsin, reported an employee’s personal flash drive containing the electronic protected health information (ePHI) approximately 2,734 individuals was stolen from its dental offices. The ePHI involved in the breach included names, patient identification numbers, dental insurance plan numbers and dates of service. Following the breach, the CE sanctioned and retrained the employees involved in the breach. Also, the CE notified employees that it banned the use of all external electronic data storage devices, unless they are encrypted and approved by the CE. As a result of OCR’s investigation, the CE updated its policy related to Breach Rule Notification and distributed the updated policy to its workforce. OCR obtained documented assurances that it implemented the corrective actions listed above.