HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 9, 2017.
- Organization as reported
- SSM Health (Dr. Syed Khader), MO
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other
- Submission date
- June 9, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14168, row:5307)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), SSM Health (SSMH), discovered that between April 12, 2017 and April 13, 2017, a component of an electromyography (EMG) medical device was stolen from the DePaul Hospital Clinic of Dr. Sayed Khader of the SSMH Medical Group. The stolen device stored protected health information (PHI), including 836 patients' first and last names, dates of birth, chief complaints, and medical record numbers. The CE provided breach notification to HHS, affected individuals, and the media and provided substitute notice. Following the breach, the CE updated its policies and procedures relating to safeguarding PHI, retrained its workforce, encrypted the medical device, and improved safeguards. In May 2018, OCR obtained evidence of the CE's updated system wide Risk Analysis and Risk Management Plan. OCR obtained documented assurances that the CE implemented the voluntary corrective actions listed above.