HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 2, 2021.
- Organization as reported
- St. Vincent's Services, Inc. D/B/A HeartShare St. Vincent's Services, NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 2, 2021
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12036, row:3175)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), St. Vincent’s Services dba HeartShare St. Vincent’s Services, reported that its business associate’s sub-contractor experienced a hacking attack affecting the protected health information (PHI) of 1,927 individuals. The PHI involved included names, addresses, and other treatment information. The sub-contractor notified affected individuals; the CE notified HHS and the media. OCR provided the CE with technical assistance regarding its HIPAA Breach Notification Rule obligations.