HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 21, 2014.
- Organization as reported
- Sutherland Healthcare Solutions, CA
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Desktop Computer
- Submission date
- March 21, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15141, row:6280)
- Archived copy
- Held in the private archive (provenance)
On March 21, 2014, the covered entity (CE), San Francisco General Hospital & Trauma Center reported that eight desktop computers were stolen from Southerland Healthcare Solutions, Inc., the CE’s business associate (BA). The computers contained the electronic protected health information (ePHI) of 27,676 individuals. The ePHI involved in the breach included names, addresses, birth dates, social security numbers, admission and discharge information, treatment location, diagnosis and billing information. The CE provided breach notification to HHS, affected individuals and the media. The CE trained its workforce members on the policies and procedures for responding and reporting security incidents. OCR obtained assurances that the CE implemented the corrective actions noted above.