HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 25, 2016.
- Organization as reported
- Stamford Podiatry Group .P.C, CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- May 25, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14515, row:5654)
- Archived copy
- Held in the private archive (provenance)
On April 14, 2016, the covered entity (CE), Stamford Podiatry Group P.C., learned that an unauthorized individual(s) had gained privileged access and compromised its computer server between February 2, 2016 and April 14, 2016, including its electronic record database. The breach affected 40,491 individuals and included demographic, financial, and clinical information. OCR reviewed the CE's policies and procedures as relevant to this breach and they appeared to be in compliance with the Privacy and Security Rule. The CE retrained staff, implemented an upgraded, more secure data backup solution, and enhanced safeguards for its information technology (IT) system, including completely rebuilding its IT operating environment. The CE implemented new risk management policies and plans, improved its processes for managing and monitoring its vendors, and reduced the amount of PHI and personally identifiable information in its possession. OCR obtained assurances that the CE provided breach notification to affected individuals and the media in accordance with the Breach Notification Rule.