HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 19, 2015.
- Organization as reported
- Sharon J. Jones, M.D., CA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Desktop Computer, Laptop, Paper/Films
- Submission date
- May 19, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14794, row:5933)
- Archived copy
- Held in the private archive (provenance)
A burglar broke into the office of the covered entity (CE) and stole 17 paper patient charts, an unencrypted desktop computer, two unencrypted laptop computers, and one encrypted computer server. The breach affected approximately 1,342 individuals’ protected health information (PHI) and included demographic, financial, and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. It also established a dedicated call center to answer questions related to the incident and offered free credit monitoring to the affected individuals. Following the breach, the CE moved to a more secure locale and completed risk analyses in July 2015 and February 2016. The CE implemented a risk mitigation plan to reflect the current work environment, updated its policies and procedures on mobile devices, enhanced physical security, and trained workforce members on security awareness. OCR provided technical assistance regarding the HIPAA Security Rule and obtained assurances that the CE implemented the corrective actions listed above.