HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of April 4, 2013.
- Organization as reported
- PORTAL HEALTHCARE SOLUTIONS LLC, VA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Network Server
- Submission date
- April 4, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15429, row:6568)
- Archived copy
- Held in the private archive (provenance)
The covered entity's (CE) business associate (BA) operated a server containing the electronic protected health information (ePHI) of 2,360 individuals that was vulnerable to access by unauthorized persons for over four months. The ePHI included transcribed doctors' notes, which may have included medical diagnoses, clinical laboratory results, diagnostic imaging reports, emergency department records, and medication administration. Upon discovery of the breach, the CE engaged a computer forensic expert to investigate the incident and terminated the BA agreement. As a result of OCR's investigation, the CE ensured that its BA secured the server, verified that the server was no longer accessible from the Internet, and required the BA to return or destroy all of the CE's ePHI.