HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 3, 2018.
- Organization as reported
- Physician Associates, LLC, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- July 3, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13765, row:4904)
- Archived copy
- Held in the private archive (provenance)
On August 7, 2017, the covered entity (CE), Physicians Associates, discovered that its medicine manufacturer’s (DePuy Synthes Mitek Sports Medicine) website vendor, CoPilot Provider Support Services (CoPilot), experienced a breach in October 2015, when a former CoPilot employee accessed the CE’s patients' protected health information (PHI). This PHI included the names, addresses, telephone numbers, dates of birth, genders, medical insurance card information, and Social Security numbers of approximately 710 individuals. The CE provided breach notification to HHS and CoPilot provided notification to affected individuals and the media on behalf of the CE. In response to the breach, the CE ceased using CoPilot as a vendor. The CE re-educated its leadership on business associate (BA) agreements. The CE now reviews vendor lists on a monthly basis to ensure that appropriate BA agreements are in place. OCR provided technical assistance to the CE regarding BAs. OCR obtained assurances that the CE implemented the corrective actions listed above.