HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Sept. 26, 2017.
- Organization as reported
- Patients Choice, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Sept. 26, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14045, row:5184)
- Archived copy
- Held in the private archive (provenance)
On November 19, 2016, an individual hacked into the covered entity’s (CE) file transfer (FTP) computer server, stole documents, and subsequently reported the incident to the CE and OCR. The types of protected health information (PHI) involved in the breach incident included demographic, financial, and clinical information. In response to the breach incident, the CE implemented additional technical safeguards, including encryption and firewall protection. Further, the CE stopped using FTP servers, updated its Privacy and Security policies and procedures, conducted an updated risk analysis, and implemented a corresponding risk management plan. OCR obtained assurances that the CE implemented these corrective actions.