HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 7, 2019.
- Organization as reported
- SOUTHERN MARYLAND MEDICAL GROUP LLC, MD
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer
- Submission date
- June 7, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13375, row:4514)
- Archived copy
- Held in the private archive (provenance)
Southern Maryland Medical Group, LLC, the covered entity (CE), reported that during a two month period the protected health information of individuals was exposed when its business associate (BA), Meditab, inadvertently removed the authentication methods for secure access to its fax cloud service portal. The breach involved the protected health information (PHI) of 1,400 individuals. The types of PHI involved included medical records, names, addresses, dates of birth, phone numbers, Social Security numbers and account numbers. The CE obtained proof that its BA had rectified the cause of the breach. The CE notified the affected individuals, published notice in the media, and posted notice on its website. Additionally, the CE adopted HIPAA Privacy and Security Rule policies and procedures and trained its staff. As a result of its investigation, OCR obtained assurances that the CE implemented the corrective actions noted above.