HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Dec. 30, 2010.
- Organization as reported
- Southern Perioperative Services, P.C., AL
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other, Other Portable Electronic Device
- Submission date
- Dec. 30, 2010
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15917, row:7056)
- Archived copy
- Held in the private archive (provenance)
A bag containing a compact disk - read only memory (CD-ROM) was stolen from the vehicle of a physician associated with the covered entity (CE). The CD-ROM involved in the breach contained names, dates of birth, social security numbers, medical histories, and the treatment information of approximately 2,046 individuals. Following the breach, the CE filed a police report and provided breach notification to affected individuals, HHS, and the media. The CE sanctioned and retrained the physician whose bag was stolen and implemented organization wide improvements to its compliance with the Privacy and Security Rules. As a result of OCR's investigation the covered entity posted substitute notification of the breach in the local paper and confirmed that corrective actions steps were taken. \ \ \