HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 1, 2017.
- Organization as reported
- Washington Health System Greene, PA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- Dec. 1, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13989, row:5128)
- Archived copy
- Held in the private archive (provenance)
Washington Health System Greene, the covered entity (CE), reported that an external computer hard drive for a bone densitometry machine was missing. The breach included the protected health information (PHI) of 4,145 individuals and included demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE improved physical safeguards and stopped using bone densitometry machines with external hard drives. The CE performed a new security risk analysis that focused on risks to mobile devices containing PHI. During the investigation, OCR reviewed the CE’s policies to ensure compliance with the Privacy and Security Rules.