HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 12, 2018.
- Organization as reported
- Pedes Orange County, Inc., CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- Jan. 12, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13943, row:5082)
- Archived copy
- Held in the private archive (provenance)
On November 14, 2017, PEDES Orange County, Inc., the covered entity (CE), discovered that a physician from another medical group accessed the CE’s electronic medical records (EMR) database and disclosed such information to an unauthorized individual, affecting 917 individuals. The types of protected health information (PHI) involved in the breach included patients’ names and clinical information. The CE provided breach notification to HHS, affected individuals, and the media and established a dedicated call center to assist individuals affected by the breach incident. Following the breach and in response to OCR’s investigation, the CE suspended the physician’s access to its EMR system and implemented technical safeguards including a new EMR system with increased access controls. OCR provided technical assistance on the Security Rule.