HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Sept. 1, 2018.
- Organization as reported
- Reliable Respiratory, MA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Sept. 1, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13702, row:4841)
- Archived copy
- Held in the private archive (provenance)
On July 2, 2018, the covered entity (CE), Reliable Respiratory, learned that a phishing email sent on June 28, 2018, comprised an employee’s email, potentially exposing the protected health information (PHI) of approximately 21,311 individuals. The types of PHI involved in the incident included demographic, clinical, and financial information. The CE provided breach notification to HHS, affected individuals, and the media, provided a call-center number and provided free credit monitoring. OCR obtained assurances that the CE implemented the corrective actions listed above. As a result of OCR’s investigation, the CE is working to implement additional safeguards such as email encryption solutions, more stringent inbound email filters targeted at catching and quarantining suspicious emails, and multifactor authentication.