HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 30, 2017.
- Organization as reported
- White Blossom Care Center, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Other
- Submission date
- June 30, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14140, row:5279)
- Archived copy
- Held in the private archive (provenance)
On June 30, 2017, the covered entity (CE), White Blossom Care Center reported that its former employees impermissibly accessed and copied its residents’ protected health information (PHI) while employed at the facility. The breached electronic PHI included names, dates of birth, social security numbers, telephone numbers, health insurance information, and medical record numbers. The CE provided breach notification to HHS, 791 affected individuals, and the media and posted substitute notice on its website. It also offered identity theft provision services to affected individuals. In response to the breach, the CE immediately contacted the FBI and San Jose Police Department and reported both former employees to the California Department of Public Health Licensing Division It also worked with Mandiant, a digital forensics firm, to ensure internal safeguards were implemented to restrict patient’s PHI only to authorized employees, revised its policies and procedures, and retrained workforce members. The CE provided OCR with additional documentation including its HIPAA Notice of Privacy Practices Policy, as relevant to this breach investigation. OCR obtained assurances that the CE implemented the corrective actions listed above.