HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 11, 2019.
- Organization as reported
- Primary Medicine of Sherman, PA/Robert J. Hernandez MD, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Electronic Medical Record
- Submission date
- Aug. 11, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13269, row:4408)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Primary Medicine of Sherman PA – Robert J. Hernandez, MD, reported that it did not have a proper business associate agreement (BAA) with its lab vendor that spelled out restrictions to the access of protected health information (PHI). This constituted a breach. The PHI involved included names and lab results. This breach affected approximately 1,335 individuals. In its mitigation efforts, the CE terminated its BAA with the vendor and retrained its staff on the requirements of a BAA. The CE notified HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions noted.