HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 19, 2017.
- Organization as reported
- Torrance Memorial Medical Center, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- June 19, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14161, row:5300)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE) reported that two workforce members responded to a phishing email which resulted in a breach of protected health information (PHI). The breach affected 44,960 individuals and included names, addresses, dates of birth, health care claims information, diagnoses, medications, other treatment information, and 3,304 social security numbers. The CE provided breach notification to HHS, affected individuals and the media. Following the breach, the CE took a number of steps to strengthen its administrative and technical safeguards. It increased its security training and enhanced authentication procedures and technical measures to identify and remove malicious emails. OCR’s investigation resulted in the CE improving its practices in safeguarding PHI.