HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 26, 2013.
- Organization as reported
- Region Ten Community Services Board, VA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Submission date
- Sept. 26, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15316, row:6455)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Region Ten Community Services Board, reported that multiple employees had responded to an email, appearing to come from an internal sender, informing them that their mailboxes had exceeded limits and instructing them to follow a link to enter username and password. A forensic investigation was conducted which did not show that any sensitive client information was compromised. However, in an effort to mitigate any potential harm the CE sent notification to over 10,000 individuals, sent a press release to a local news station and also posted information about the occurrence on its website. The CE engaged the services of a technology consulting firm and has provided OCR written assurance that it has implemented updates to its computer network including an additional firewall