HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 26, 2017.
- Organization as reported
- Sound Community Services, Inc., CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- May 26, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14178, row:5317)
- Archived copy
- Held in the private archive (provenance)
On January 13, 2017, an unknown individual accessed the covered entity's (CE) CEO’s email account and sent emails to its employees. The CEO’s email account contained a file with the electronic protected health information (ePHI) – names and client numbers – of approximately 1,273 individuals. The CE immediately took steps to implement additional technical safeguards for its email system and engaged a third-party service to assist in its ongoing privacy and security activities. The CE provided breach notification to HHS, and OCR provided technical assistance regarding the breach notification requirements pertaining to to the media and affected individuals.