HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 20, 2017.
- Organization as reported
- Tampa Bay Surgery Center, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Other
- Submission date
- June 20, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14158, row:5297)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Tampa Bay Surgery Center, was notified by the FBI that on May 4, 2017, patient information had been posted online. Based on the CE’s internal investigation, it was determined that a cyber-attacker known as “The Dark Overlord” had compromised remote access to its information system and stole a spreadsheet containing the names, dates of birth, addresses, and social security numbers of 25,848 individuals. The CE provided breach notification to HHS, to affected individuals, to the media and posted notice on its website. In response to the breach, the CE substantially revised its technical security safeguards, including access controls. OCR obtained assurances that the CE implemented the corrective actions listed above.