HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 7, 2018.
- Organization as reported
- TMC HealthCare, AZ
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- Sept. 7, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13696, row:4835)
- Archived copy
- Held in the private archive (provenance)
On July 12, 2018, the covered entity (CE), TMC HealthCare, discovered that paper files containing the protected health information (PHI) of 1,776 individuals had inadvertently been left unsecured in an unlocked suite used for storage. The types of unsecured PHI involved in the incident included patients' names, dates of birth, addresses, medical record numbers, insurance ID or Social Security numbers, diagnoses, treatment information, provider information, medications, test results, and other clinical information. Following discovery of the incident, the CE secured the files and provided breach notification to affected individuals, prominent media outlets, and the Secretary of HHS. OCR obtained assurances that the CE implemented the corrective action steps listed above.