HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 5, 2017.
- Organization as reported
- Toth Enterprises II d/b/a Victory Medical, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Email, Paper/Films
- Submission date
- June 5, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14172, row:5311)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Toth Enterprises II d/b/a Victory Medical, learned that an unidentified person uploaded a paper-based report onto a third-party website without the knowledge or authorization of the CE. The report contained the protected health information (PHI) of 2,000 individuals and included patients’ demographic information and medical account numbers. The CE provided breach notice to HHS, affected individuals, and the media. Following the breach, the CE conducted a new risk analysis, developed a new risk management plan, implemented improved administrative safeguards, developed new policies, and retrained staff. OCR obtained documented assurances that the CE implemented these correction actions.