HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 7, 2017.
- Organization as reported
- Southwest Community Health Center, CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Desktop Computer, Laptop
- Submission date
- June 7, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14170, row:5309)
- Archived copy
- Held in the private archive (provenance)
Thieves broke in and stole several computers at two facilities of the covered entity (CE), Southwest Community Health Center. The computers contained unsecured electronic protected health information (ePHI) saved or cached to the local hard drives. The CE reported that approximately 6,000 individuals were affected by the breach, but after data mining was completed, the CE determined that 13,481 individuals could have been affected. The types of ePHI involved in the breach included demographic, financial, and clinical information. The CE provided breach notification to HHS, affected individuals (7,965 by individual letter and 5,516 by substitute notice), and the media. Following the breach, the CE improved physical security, revised policies, ended caching ePHI to local hard drives, encrypted all workstations and laptop computers, and implemented several other enhancements to its information systems environment. OCR obtained assurances that the CE implemented the corrective actions noted above.