HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 18, 2018.
- Organization as reported
- The University of Texas Health Science Center at Houston, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- Sept. 18, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13686, row:4825)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), The University of Texas Health Science Center at Houston, reported that documents containing protected health information (PHI) were stolen from an employee’s vehicle. This breach affected 1,792 individuals and the PHI involved included names, birthdates, diagnoses, and clinical information. The CE notified HHS, affected individuals, the media, and local law enforcement. Substitute notice was also provided. Following the incident, the CE sanctioned the responsible employee, implemented additional administrative safeguards, and retrained its employees on the importance of safeguarding PHI. OCR obtained assurances that the CE implemented the corrective actions noted.