ScortonAI/Cyber-Security-Breaches huggingface dataset:
Breach report: Rape & Brooks Orthodontics, P.C. (AL)
Type of breach: Theft
Location of breached information: Desktop Computer, Network Server, Other Portable Electronic Device, Other
Date of breach: 2/3/2011
Individuals affected: 20744
Breach report: Clarksburg - Louis A. Johnson VA Medical Center (WV)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 10/26/2010
Individuals affected: 1470
Breach report: County of Los Angeles (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 2/23/2011
Individuals affected: 667
Breach report: EISENHOWER MEDICAL CENTER (CA)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 3/11/2011
Individuals affected: 514330
Breach report: Catholic Social Services (AK)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 2/1/2011
Individuals affected: 1700
Business associate involved: Trisha Elaine Cordova
A personal laptop computer containing the electronic protected health information (ePHI) of 1,700 individuals and approximately 493 adoption home studies was stolen from a contractor's vehicle.  The ePHI involved included names, addresses, phone numbers, dates of birth, driver's license numbers, health information, and social security numbers.  At the time of the breach, the covered entity (CE) did not have a business associate (BA) contract with the contractor.  Following OCR's investigation, the CE developed policies and procedures for obtaining BA contracts as required by the Privacy Rule and verified that the contractor no longer had a business relationship with the CE.  OCR obtained assurances that breach notification was provided to the affected individuals, HHS, and the media.
Breach report: Park Avenue Obstetrics & Gynecology, PC (AZ)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 3/25/2011
Individuals affected: 635
Breach report: Brian J Daniels D.D.S.,Paul R Daniels D.D.S. (AZ)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 3/1/2011
Individuals affected: 10000
Breach report: MidState Medical Center (CT)
Type of breach: Loss
Location of breached information: Other
Date of breach: 2/14/2011
Individuals affected: 93500
Business associate involved: Hartford Hospital
Breach report: Patient Care Services at Saint Francis, Inc. (OK)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 1/13/2011
Individuals affected: 84000
Breach report: Union Security Insurance Company (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 2/18/2011
Individuals affected: 935
Breach report: Oklaholma State Dept. of Health (OK)
Type of breach: Theft
Location of breached information: Laptop, Paper
Date of breach: 4/6/2011
Individuals affected: 132940
Breach report: Aiken Community Based Outpatient Clinic (SC)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 2/16/2011
Individuals affected: 2717
Breach report: Health Net, Inc. (CA)
Type of breach: Unknown
Location of breached information: Other
Date of breach: 1/21/2011
Individuals affected: 1900000
Business associate involved: IBM
Breach report: SW General Inc (AZ)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 5/1/2004
Individuals affected: 566
Breach report: Fairview Health Services (MN)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 2/19/2011
Individuals affected: 1215
Breach report: Time Insurance Company (WI)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 2/1/2011
Individuals affected: 675
Business associate involved: Healthcare Solutions Team, LLC
Breach report: Community Action partnership of Natrona County (WY)
Type of breach: Hacking/IT Incident
Location of breached information: Desktop Computer
Date of breach: 2/23/2011
Individuals affected: 15000
Breach report: Keith & Fisher, DDS, PA (NC)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 2/16/2011
Individuals affected: 6000
Breach report: MacNeal Hospital (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail
Date of breach: 3/10/2011
Individuals affected: 845
Breach report: West Lake Hospital  (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail
Date of breach: 3/10/2011
Individuals affected: 686
Breach report: Phoenix Health Plan (AZ)
Type of breach: Hacking/IT Incident
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail
Date of breach: 3/10/2011
Individuals affected: 9393
Breach report: MacNeal Physician Group (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail
Date of breach: 3/10/2011
Individuals affected: 532
Breach report: Genesis Clinical Laboratory (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail
Date of breach: 3/10/2011
Individuals affected: 1070
Breach report: Knox Community Hospital (OH)
Type of breach: Improper Disposal
Location of breached information: Other
Date of breach: 10/1/2010
Individuals affected: 500
Breach report: Speare Memorial Hospital (NH)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/2/2011
Individuals affected: 5960
Breach report: Methodist Charlton Medical Center (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/16/2011
Individuals affected: 1500
An unencrypted laptop was stolen from a locked office in the hospital.  The laptop contained the PHI of 1523 patients. The protected health information involved in the breach contained demographic and clinical data. Following the breach, the CE filed a police report, notified affected patients and notified the media. Additionally, the CE expanded its encryption policy to include more laptops and implemented additional physical safeguards.
Breach report: Drs Edalji and Komer (MA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/12/2011
Individuals affected: 563
Breach report: Reid Hospital & Health Care Services (IN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/2/2011
Individuals affected: 22001
Breach report: Union Security Insurance Company (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 3/24/2011
Individuals affected: 850
Breach report: Indiana Regional Medical Center (PA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 9/28/2010
Individuals affected: 1388
Breach report: MMM Healthcare, Inc. (PR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 3/8/2011
Individuals affected: 32390
Breach report: PMC Medicare Choice (PR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 3/8/2011
Individuals affected: 24361
Breach report: CVS CAREMARK (AZ)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 1/17/2011
Individuals affected: 654
Breach report: CENTER FOR ARTHRITIS & RHEUMATIC DISEASES (FL)
Type of breach: Theft
Location of breached information: Other, Paper
Date of breach: 1/1/2011
Individuals affected: 8000
Breach report: Robert B. Miller, MD (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/1/2011
Individuals affected: 620
Breach report: Imaging Center of Garland (TX)
Type of breach: Improper Disposal
Location of breached information: Other
Date of breach: 3/15/2011
Individuals affected: 1031
Breach report: New York State Department of Health (NY)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 4/17/2011
Individuals affected: 550
Business associate involved: St. Mary's Hospital for Children
A bag containing 43 pages of protected health information (PHI) of 550 nursing home residents and an encrypted laptop computer were stolen from the vehicle of an employee of the covered entity's (CE) business associate (BA).  The PHI included names, dates of birth, gender identities, names of the nursing homes, and Medicaid numbers.  Upon discovery of the breach, the CE filed a police report and provided breach notification to HHS, the media, and all affected individuals, as well as offering one year of free identity theft protection.  Following OCR's investigation, the CE's BA terminated the employee and re-trained its staff on its privacy and security policies, including not leaving laptops in unoccupied vehicles.  In addition, the CE reminded all contractors about the need to safeguard confidential information, and reviewed the BA's contractual obligations relating to safeguarding PHI.   The breach incident involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR verified that the CE had a proper BA agreement in place that restricted the BA's use and disclosure of PHI and required the BA to safeguard all PHI.
Breach report: St. Mary's Hospital for Children (NY)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 4/17/2011
Individuals affected: 550
A laptop computer containing the protected health information (PHI) of approximately 550 individuals was stolen from the vehicle of the business associate's (BA) workforce member.  The PHI included names, dates of birth, gender identities, names of nursing homes, and Medicaid numbers of the covered entity's (CE) patients.  Following the breach, the BA terminated the employee who was involved in the breach and provided credit monitoring services to the affected individuals.  The BA also re-trained its staff.  Following OCR's investigation, the CE and the BA reviewed the BA's contractual obligations relating to PHI during an in-person meeting.  The breach incident involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR verified that the CE had a proper BA agreement in place that restricted the BA's use and disclosure of PHI and required the BA to safeguard all PHI.
Breach report: Medicare Fee-for-Service Program (MD)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 4/11/2011
Individuals affected: 13412
Business associate involved: Cahaba Government Benefit Administrators, LLC
Breach report: VA Caribbean Healthcare System (PR)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 3/30/2011
Individuals affected: 6006
An employee of the covered entity (CE), VA Caribbean Healthcare System, left documents containing the protected health information (PHI) of 6,006 individuals in an unsecure bag at a nursing station.  The PHI included names, social security numbers, patient care assignments, patient counts and patient census lists.  Upon discovery of the breach, the CE secured the PHI and provided breach notification to HHS, the media, and affected individuals.  As a result of OCR's investigation, the CE disciplined and retrained the employee and implemented a procedure that nursing leadership is required to conduct rounds on wards once vacated.  The CE also retrained all staff on its privacy and security policies and procedures.
Breach report: Blue Cross Blue Shield of Michigan (MI)
Type of breach: Unauthorized Access/Disclosure, Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 11/17/2010
Individuals affected: 11387
Business associate involved: Agent Benefits Corporation
Breach report: Spartanburg Regional Healthcare System (SC)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 3/28/2011
Individuals affected: 400000
Breach report: Saint Joseph - Berea (KY)
Type of breach: Theft, Loss
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 4/14/2011
Individuals affected: 1986
Breach report: Navos (WA)
Type of breach: Unknown
Location of breached information: Paper
Date of breach: 3/15/2011
Individuals affected: 2700
Breach report: Dunes Family Health Care, P.C (OR)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 3/11/2011
Individuals affected: 17000
Business associate involved: Lower Umpqua Hospital
Breach report: Metropolitan Community Health Services, Inc. (NC)
Type of breach: Unknown
Location of breached information: E-mail
Date of breach: 5/18/2011
Individuals affected: 1263
Breach report: TUBA CITY REGIONAL HEALTH CARE CORPORATION (AZ)
Type of breach: Loss, Improper Disposal
Location of breached information: Paper
Date of breach: 4/1/2011
Individuals affected: 2000
Breach report: FOOTHILLS NEPHROLOGY, PC (SC)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 4/28/2011
Individuals affected: 1280
Breach report: Sutter Gould Medical Foundation (SGMF) (CA)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 5/23/2011
Individuals affected: 1192
Business associate involved: Fidelity National Technology Imaging (FNTI)
Breach report: Silverpop Systems Inc. Health and Welfare Plan (GA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/15/2011
Individuals affected: 884
Breach report: New River Health Association (WV)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 4/1/2011
Individuals affected: 950
Breach report: HealthCare Partners (CA)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 4/17/2011
Individuals affected: 15677
Breach report: Gene S. J. Liaw, MD. PS (WA)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 4/4/2011
Individuals affected: 1105
Breach report: Blue Cross and Blue Shield of Florida  (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 4/11/2011
Individuals affected: 3463
Breach report: NOL, LLC d/b/a Premier Radiology (TN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/7/2011
Individuals affected: 810
Breach report: Advanced Diagnostic Imaging, P.C. (TN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/7/2011
Individuals affected: 705
Breach report: University of Missouri Health Care (MO)
Type of breach: Unknown
Location of breached information: Paper
Date of breach: 6/14/2011
Individuals affected: 1288
Breach report: Accendo (AZ)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 1/1/2011
Individuals affected: 175350
Breach report: Ohio Health Plans (OH)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/3/2011
Individuals affected: 78042
Business associate involved: Area Agency on Aging, Ohio District 5
Breach report: Gail Gillespie and Associates, LLC (LA)
Type of breach: Theft
Location of breached information: Laptop, Desktop Computer, Network Server, E-mail, Other Portable Electronic Device, Other, Electronic Medical Record
Date of breach: 6/25/2011
Individuals affected: 2000
Breach report: Health Plan of San Mateo (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 4/25/2011
Individuals affected: 694
Breach report: Department of Health Care Policy and Financing (CO)
Type of breach: Loss
Location of breached information: Other
Date of breach: 5/6/2011
Individuals affected: 3589
Business associate involved: Department of Personnel and Administration
Breach report: Yanez Dental Corporation (CA)
Type of breach: Theft
Location of breached information: Desktop Computer, Network Server
Date of breach: 5/22/2011
Individuals affected: 10190
Breach report: Jackson Health System (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other, Electronic Medical Record
Date of breach: 10/1/2008
Individuals affected: 1562
Breach report: The Mount Sinai Hospital (NY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/7/2011
Individuals affected: 712
Two unencrypted laptop computers containing the electronic protected health information (ePHI) of 712 individuals were stolen from the covered entity's (CE) office.  The ePHI included names, dates of birth, social security numbers, diagnostic reports, and demographic information.  Upon discovery of the breach, the CE filed a police report to recover the stolen items.  As a result of OCR's investigation, the CE improved physical security by installing an exit alarm lock and surveillance camera, and implementing a policy and procedure requiring managers to monitor inappropriate use of the facility's rear exit.  The CE also inventoried its ePHI systems and adopted and implemented policies and procedures for workstation security, encryption, security awareness and training, electronic devices, and media controls.
Breach report: Troy Regional Medical Center (AL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 3/22/2011
Individuals affected: 880
Breach report: Lansing Community College (MI)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 5/9/2011
Individuals affected: 5000
Business associate involved: AssureCare Risk Management
Breach report: Dr Axel Velez (PR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 6/19/2011
Individuals affected: 2800
Breach report:  DeKalb Medical Center, Inc. d/b/a DeKalb Medical Hillandale (GA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 7/11/2010
Individuals affected: 7500
Breach report: Beth Israel Deaconess Medical Center (MA)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 4/17/2011
Individuals affected: 2021
Breach report: Gypsum Management and Supply, Inc. Medical and Dental Plan (GA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 5/9/2011
Individuals affected: 25330
Business associate involved: Assurecare Risk Management, Inc.
Breach report: Andersen Air Force Base, Guam (VA)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 5/13/2011
Individuals affected: 700
Breach report: Molina Medicare (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 1/1/2011
Individuals affected: 4573
Business associate involved: RxAmerica, a subsidiary of CVS Caremark
Breach report: Windsor Health Plan (TN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 3/1/2011
Individuals affected: 1378
Business associate involved: RxAmerica LLC
Breach report: Health Care Service Corporation (IL)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 6/28/2011
Individuals affected: 501
Breach report: University of Kentucky - UK HealthCare (KY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/7/2011
Individuals affected: 3604
Breach report: Austin Center for Therapy and Assessment, LLC (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 7/8/2011
Individuals affected: 1870
An unencrypted laptop, containing the electronic protected health information (ePHI) of 1,870 individuals, was stolen from the covered entity's (CE) office.  The ePHI involved includes clinical evaluation reports, test results, patient names, addresses, phone numbers, and social security numbers.  Upon discovery of the breach, the CE notified affected individuals, OCR and the media.  Following OCR's investigation, the CE revised its HIPAA policies and procedures, implemented additional physical safeguards in its facility and installed encryption software.
Breach report: Treatment Services Northwest (OR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 7/8/2011
Individuals affected: 1200
Breach report: Mills-Peninsula Health Services (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 11/1/2009
Individuals affected: 1500
Breach report: Brigham and Women's Hospital and Faulkner Hospital  (MA)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 6/21/2011
Individuals affected: 638
A covered entity's (CE) workforce member lost an external hard drive containing the electronic protected health information (ePHI) of 638 individuals while traveling.  The external hard drive included names, medical record numbers, dates of admission, medications, diagnoses, and treatment information.  The CE notified HHS, the media, and all individuals affected regarding the breach and provided individuals with identity protection services.  Following the breach, the CE sanctioned the workforce member involved and retrained the workforce member and division staff on  safeguards for ePHI.  In addition, the CE established a mitigation workgroup to review policies and procedures regarding the protection of ePHI and created a new external hard drive encryption policy.  OCR obtained assurances that the CE  implemented the corrective action listed above.
Breach report: Ashley Industrial Molding, Inc. Employee Welfare Benefit Plan  (IN)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 5/9/2011
Individuals affected: 506
Business associate involved: AssureCare Risk Management, Inc.
Breach report: Monmouth Medical Center (NJ)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device, Other
Date of breach: 6/24/2011
Individuals affected: 6443
Business associate involved: MedAssets
An unencrypted hard drive containing the electronic protected health information (ePHI) of 6,443 individuals was stolen from an employee of the covered entity's (CE) business associate (BA), MedAssets.  The ePHI included names, dates of birth, social security number, account numbers, medical record numbers, charges incurred, amounts paid, admission and discharge dates, and information regarding health insurance and eligibility for applicable governmental benefit programs.  Upon discovery of the breach, the CE, Monmouth Medical Center, filed a police report, provided breach notification to HHS, the media, and affected individuals, and posted substitute notification on its website.  As a result of OCR's investigation, the BA retrained the employee, instructed all employees to stop using any type of external storage device that contains ePHI, and recalled and destroyed all unencrypted external hard drives that contained ePHI.  In addition, the BA improved technical safeguards by encrypting external hard drives and installing a new software system that monitors, controls and encrypts data leaving the BA's computers.  The BA also hired an IT security analyst to supplement its security program.  The breach incident involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR verified that the CE had a proper BA agreement in place that restricted the BA's use and disclosure of PHI and required the BA to safeguard all PHI.