HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 2, 2018.
- Organization as reported
- Ron's Pharmacy Services, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Feb. 2, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13924, row:5063)
- Archived copy
- Held in the private archive (provenance)
On February 8, 2017, Ron's Pharmacy Services, the covered entity (CE), identified unusual activity in an employee email account. The CE initiated an investigation and changed the employee’s email credentials. The CE's third-party forensic investigators determined that an individual(s) inappropriately accessed the employee’s email account. Within that employee’s email account was an email message containing protected health information (PHI) relating to 6,871 patients. The email included patients' names, internal account numbers, payment adjustment information and, for a small number of patients, prescription medication information. The CE provided breach notification to HHS, affected individuals, and the media pursuant to the Breach Notification Rule. Following the breach, the CE changed all passwords, updated its policies and procedures and retrained its workforce member. OCR obtained assurances that the CE implemented these voluntary corrective actions.