HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 16, 2016.
- Organization as reported
- Vision Care Florida, LLC, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Desktop Computer
- Submission date
- Nov. 16, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14365, row:5504)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Vision Care Florida, LLC, discovered that on September 21, 2016, its server was infected with a ransomware virus after an employee opened an email attachment. The CE’s server contained patients' demographic information including the names, dates of birth, and addresses of 7,500 individuals. The CE provided breach notification to HHS, affected individuals, and the media. OCR provided technical assistance to the CE regarding the Breach Notification Rule and documentation of training. In response to the breach, the CE changed its policies and procedures regarding its information security and included security training concerning malicious software. The CE removed its computer server from the Internet immediately, upgraded to a business firewall, implemented a cloud based backup, and strengthened its passwords. Additionally, the CE retrained its workforce and disseminated security reminders. OCR obtained assurances that the CE implemented the corrective actions listed above.