HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 22, 2017.
- Organization as reported
- Sutter Valley Medical Foundation d/b/a Sutter Medical Foundation, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop, Paper/Films
- Submission date
- Nov. 22, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13995, row:5134)
- Archived copy
- Held in the private archive (provenance)
Sutter Medical Foundation, the covered entity (CE), reported that an encrypted laptop and a binder of paper documents were stolen from an employee’s locked vehicle. The CE determined that the subsequently recovered paper documents were intact. The protected health information (PHI) exposed included the names, dates of birth, ages, medical record numbers, primary care physicians, treating providers’ names, appointment times, visit types, and/or any needed accommodations of 613 individuals. The CE notified prominent media outlets and posted a copy of the press release on its website. Following the breach, the CE sanctioned the responsible workforce member, offered affected individuals one year of identity theft protection, and retrained its workforce members. OCR obtained assurances that the CE implemented the corrective actions listed above.