HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 23, 2017.
- Organization as reported
- Stephenville Medical & Surgical Clinic, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer
- Submission date
- Jan. 23, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14292, row:5431)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Stephenville Medical & Surgical Clinic, reported that an employee accidentally emailed a master list of patients whose charts had been purged and/or destroyed to an unauthorized recipient, resulting in the impermissible disclosure of the protected health information (PHI) of approximately 61,701 individuals. The PHI included demographic information. Following discovery of the breach, the CE sanctioned the employee responsible for the breach, implemented additional safeguards, and revised and updated its policies and procedures. OCR provided technical assistance regarding individual and media notification requirements and confirmed that the CE completed the required breach notifications. The CE also offered the affected individuals free credit monitoring services.