HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 17, 2018.
- Organization as reported
- Smith Dental Care, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer, Email
- Submission date
- Oct. 17, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13653, row:4792)
- Archived copy
- Held in the private archive (provenance)
Smith Dental Care, the covered entity (CE), reported that on September 28, 2018, it discovered that a workforce member’s credentials were compromised by an unauthorized individual through an email phishing campaign. The CE determined that the protected health information (PHI) of 5,000 individuals was involved in the breach, including names, telephone numbers, and email addresses. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE improved technical safeguards and retrained workforce members. OCR obtained assurances that the CE implemented the corrective actions listed above and provided technical assistance on the requirements of the Breach Notification Rule.