HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 25, 2019.
- Organization as reported
- Seacoast Pathology, NH
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 25, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13298, row:4437)
- Archived copy
- Held in the private archive (provenance)
Seacoast Pathology, the covered entity (CE), reported that its business associate (BA), American Medical Collection Agency, discovered unauthorized access to its web payment portal. The breach affected 9,756 individuals and the protected health information (PHI) involved included identification numbers, insurance information, names, dates of birth, addresses, phone numbers, social security numbers, and financial information. The covered entity notified all affected individuals as well as the media. As a result of the breach, Seacoast Pathology dissolved its business associate relationship with American Medical Collection Agency.