ScortonAI/Cyber-Security-Breaches huggingface dataset:
Breach report: UMASSAmherst (MA)
Type of breach: Hacking/IT Incident
Location of breached information: Desktop Computer
Date of breach: 10/22/2012
Individuals affected: 1670
Breach report: Palm Beach County Health Department (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 1/7/2013
Individuals affected: 877
Breach report: Lucile Packard Children's Hospital (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/8/2013
Individuals affected: 12900
Breach report: Fayetteville VAMC (NC)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 4/17/2013
Individuals affected: 1093
Breach report: Lincoln County Health and Human Services/Lincoln Community Health Center (OR)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 4/17/2013
Individuals affected: 959
Breach report: Union Security Insurance Company (MO)
Type of breach: Improper Disposal
Location of breached information: E-mail
Date of breach: 5/17/2013
Individuals affected: 1127
Breach report: Gulf Breeze Family Eyecare, Inc (FL)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Desktop Computer, Network Server, E-mail, Electronic Medical Record, Paper
Date of breach: 03/08/2013-05/09/2013
Individuals affected: 9626
Breach report: Jacksonville Spine Center (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 4/25/2013
Individuals affected: 5200
Breach report: Iowa Department of Human Services (IA)
Type of breach: Loss, Unknown
Location of breached information: Other
Date of breach: 4/30/2013
Individuals affected: 7335
Breach report: James A. Fosnaugh (NE)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 05/01/2013 - 05/03/2013
Individuals affected: 2125
Breach report: Lone Star Circle of Care (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 05/01/2013-05/02/2013
Individuals affected: 1955
Breach report: Aflac (GA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/9/2013
Individuals affected: 679
Business associate involved: Alberto Gerardo Vazquez Rivera
Breach report: Indiana Family & Social Services Administration (IN)
Type of breach: Other
Location of breached information: Paper
Date of breach: 04/06/2013-05/21/2013
Individuals affected: 187533
Business associate involved: RCR Technology Corporation
Breach report: Northrop Grumman Retiree Health Plan (VA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 5/20/2013
Individuals affected: 4305
Business associate involved: CVS Caremark
Business associate (BA) employees erroneously sent 4,305 health plan members' protected health information (PHI) to other plan members.  The PHI involved in the breach included names and prescribed medication(s).  The covered entity, Northrop Grumman Retiree Health Plan, provided breach notification to HHS, and the BA, CVS Caremark, provided breach notification to affected individuals and the media.  Following the breach, the BA revised its quality control policies for targeted mailings and retrained employees involved in the breach to prevent similar incidents in the future.  OCR obtained assurances that the BA implemented the breach notification and policy revisions listed above.
Breach report: Health Net, Inc. (CA)
Type of breach: Other
Location of breached information: Paper
Date of breach: 04/01/2013 - 05/31/2013
Individuals affected: 8331
Breach report: South Florida Neurology Associates, P.A. (FL)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 05/25/2013-05/30/2013
Individuals affected: 900
Breach report: Samaritan Regional Health System (OH)
Type of breach: Other
Location of breached information: Paper
Date of breach: 5/29/2013
Individuals affected: 2203
Breach report: MED-EL Coproration (NC)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 6/25/2013
Individuals affected: 609
Breach report: Sutter Health East Bay Region (Alta Bates Summit Medical Center; Sutter Delta Medical Center; Eden Medical Center) (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 3/1/2011
Individuals affected: 4479
Business associate involved: Nelson Family of Companies
Breach report: Illinois Department of Healthcare and Familiy Services (IL)
Type of breach: Other
Location of breached information: Paper
Date of breach: 5/8/2013
Individuals affected: 3133
Business associate involved: Family Health Network
Breach report: Delta Dental of Pennsylvania (PA)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 5/13/2013
Individuals affected: 4718
Business associate involved: ZDI
Breach report: Medtronic, Inc. (MN)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 03/28/2013-03/29/2013
Individuals affected: 2764
Breach report: Texas Health Harris Methodist Hospital Fort Worth (TX)
Type of breach: Improper Disposal
Location of breached information: Other
Date of breach: 5/11/2013
Individuals affected: 277014
Business associate involved: Shred-it International Inc.
Breach report: Long Beach Memorial Medical Center (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 09/01/2012-07/01/2013
Individuals affected: 2864
Breach report: Hansen & Associates (WY)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 05/21/2013-05/29/2013
Individuals affected: 2700
Breach report: Sheet Metal Local 36 Welfare Fund (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 08/01/2012-07/08/2013
Individuals affected: 4560
Business associate involved: People Resource Corporation
Breach report: Harris County (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 08/15/2005 - 06/14/2007
Individuals affected: 21000
Breach report: San Jose Medical Supply Co., Inc. (CA)
Type of breach: Theft, Unauthorized Access/Disclosure, Hacking/IT Incident
Location of breached information: Desktop Computer, Network Server
Date of breach: 10/01/2011-11/31/2011
Individuals affected: 800
Business associate involved: Jesle Kuizon
Breach report: GEO Care, LLC (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 4/16/2013
Individuals affected: 710
Breach report: The Brookdale Hospital and Medical Center (NY)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 5/24/2013
Individuals affected: 2700
Breach report: Louisiana State University Health Care Services Division (LA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 12/1/2011
Individuals affected: 6994
Breach report: Oregon Health & Science University (OR)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 01/01/2011-07/03/2013
Individuals affected: 1361
Breach report: Rocky Mountain Spine Clinic, P.C. (CO)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 6/11/2013
Individuals affected: 532
Breach report: Vitreo-Retinal Medical Group, Inc.  (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/5/2013
Individuals affected: 1837
Breach report: Arkansas Department of Human Services (AR)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/14/2013
Individuals affected: 1911
Business associate involved: Health Resources of Arkansas
Breach report: Baylor All Saints Medical Center at Fort Worth (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other Portable Electronic Device
Date of breach: 05/07/2013-06/06/2013
Individuals affected: 940
Breach report: Cogent Healthcare, Inc. (TN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 05/05/2013-06/24/2013
Individuals affected: 32151
Business associate involved: M2ComSys Inc.
Breach report: Young Family Medicine Inc. (OH)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/12/2013
Individuals affected: 2045
Breach report: Hancock OB/GYN (IN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 11/09/2011 - 06/17/2013
Individuals affected: 1396
Breach report: Colfax (IN)
Type of breach: Other
Location of breached information: Other
Date of breach: 4/11/2013
Individuals affected: 5497
Business associate involved: Anthem BCBS of GA
Breach report: Missouri Department of Social Services (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 10/16/2011 - 06/07/2013
Individuals affected: 1357
Business associate involved: InfoCrossing, Inc.
Breach report: Foundations Recovery Network (TN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/15/2013
Individuals affected: 5690
Breach report: California Correctional Health Care Services (CA)
Type of breach: Other
Location of breached information: Paper
Date of breach: 6/19/2013
Individuals affected: 1033
Breach report: North Texas Comprehensive Spine & Pain Center (TX)
Type of breach: Theft, Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 6/16/2013
Individuals affected: 3200
Breach report: Minne-Tohe Health Center/Elbowoods Memorial Health Center (ND)
Type of breach: Improper Disposal, Unauthorized Access/Disclosure
Location of breached information: Desktop Computer, Other
Date of breach: 10/1/2011
Individuals affected: 10000
Breach report: Jackson Health System (FL)
Type of breach: Other
Location of breached information: Paper
Date of breach: 01/08/2013 - 01/10/2013
Individuals affected: 1471
Breach report: Advocate Health and Hospitals Corporation, d/b/a Advocate Medical Group (IL)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 7/15/2013
Individuals affected: 4029530
Breach report: Summit Community Care Clinic, Inc. (CO)
Type of breach: Hacking/IT Incident
Location of breached information: Desktop Computer
Date of breach: 7/22/2013
Individuals affected: 921
Breach report: UT Physicians (TX)
Type of breach: Theft, Loss
Location of breached information: Laptop
Date of breach: 07/22/2013-08/02/2013
Individuals affected: 596
Breach report: Parkview Community Hospital Medical Center (CA)
Type of breach: Other
Location of breached information: Network Server
Date of breach: 05/05/2013 - 06/24/2013
Individuals affected: 32000
Business associate involved: Cogent Healthcare, Inc.
Breach report: Atlanta Center for Reproductive Medicine (GA)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 7/12/2013
Individuals affected: 654
Breach report: St. Anthony's Physician Organization (MO)
Type of breach: Theft
Location of breached information: Laptop, Other Portable Electronic Device
Date of breach: 7/29/2013
Individuals affected: 2600
Breach report: Janna Benkelman LPC LLC (CO)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/1/2013
Individuals affected: 1500
Breach report: Olson & White Orthodontics (MO)
Type of breach: Theft
Location of breached information: Desktop Computer, Network Server
Date of breach: 7/22/2013
Individuals affected: 10000
Breach report: Kaiser Foundation Health Plan of the Northwest (OR)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 3/15/2013
Individuals affected: 647
Breach report: Hankyu Chung, M.D. (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/17/2013
Individuals affected: 2182
Breach report: ICS Collection Service, Inc. on behalf of University of Chicago Physicians Group (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Other
Date of breach: 7/9/2013
Individuals affected: 1290
Business associate involved: ICS Collection Service, Inc.
Breach report: ACO of Puerto Rico (PR)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 03/05/2013 - 07/16/2013
Individuals affected: 5000
Business associate involved: PHMHS
Upon request, a subcontractor (PHM Software Solutions) of the covered entity's (CE) business associate (BA), PHM Healthcare Solutions, modified a software application the CE was utilizing  which led to the disclosure of electronic protected health information (ePHI) of 5,000 individuals on the Internet.  The ePHI included names, gender, member identification numbers, dates of birth, and consent forms.  The CE provided breach notification to HHS, the media, and affected individuals and posted substitute notice on its website.  Upon discovery of the breach, the BA removed the software application and placed it offline.  As a result of OCR's investigation, the CE had its BA to conduct a risk analysis and create a risk management plan to address any vulnerabilities identified in the risk analysis.  The breach incident involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR provided technical assistance to assist the CE understand its obligations under the Privacy and Security Rules regarding BA agreements.
Breach report: NHC HealthCare, Oak Ridge (TN)
Type of breach: Loss
Location of breached information: Other
Date of breach: 5/10/2013
Individuals affected: 4268
Breach report: NHC HealthCare, Mauldin (SC)
Type of breach: Improper Disposal
Location of breached information: Other
Date of breach: 5/15/2013
Individuals affected: 4204
Breach report: Advocate Health and Hospitals Corporation d/b/a Advocate Medical Group  (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 06/30/2013 - 08/15/2013
Individuals affected: 2029
Business associate involved: Blackhawk Consulting Group
Breach report: Dreyer Medical Clinic (IL)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 06/30/2013 - 08/15/2013
Individuals affected: 998
Business associate involved: Blackhawk Consulting Group
Breach report: South Shore Physicians, PC (NY)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 01/01/2006 - 01/12/2012
Individuals affected: 8000
Breach report: Dermatology Associates of Tallahassee (FL)
Type of breach: Unknown
Location of breached information: Other
Date of breach: 9/4/2013
Individuals affected: 916
Breach report: Sierra View District Hospital (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 07/01/2013 - 08/02/2013
Individuals affected: 1009
Breach report: Missouri Department of Social Services (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 12/21/2009 - 06/07/2013
Individuals affected: 25461
Business associate involved: InfoCrossing, Inc.
Breach report: Holy Cross Hospital, Inc. (FL)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Desktop Computer, Network Server
Date of breach: 8/14/2013
Individuals affected: 9900
Breach report: Region Ten Community Services Board (VA)
Type of breach: Hacking/IT Incident
Location of breached information: E-mail
Date of breach: 7/29/2013
Individuals affected: 10228
Breach report: Comprehensive Podiatry LLC (OH)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/3/2013
Individuals affected: 1360
Breach report: Santa Clara Valley Medical Center (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 09/14/2013 - 09/15/2013
Individuals affected: 579
Breach report: Sarah Benjamin, DPM - Littleton Podiatry  (CO)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/27/2013
Individuals affected: 3512
Business associate involved: Not Applicable
Breach report: Carol L. Patrick, Ph.D. (OH)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 08/08/2013-08/09/2013
Individuals affected: 517
Breach report: HOPE Family Health (TN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/4/2013
Individuals affected: 6932
Breach report: Paul G. Klein, DPM (NJ)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 10/1/2013
Individuals affected: 2500


OCR opened an investigation of the covered entity (CE), Paul G. Klein DPM, after it reported an encrypted and password protected laptop was stolen that contained the electronic protected health information (ePHI) of 2,500 individuals.  The ePHI included names, addresses, dates of birth, social security numbers, diagnosis conditions, lab test results, medications, medical notes, and treatment plans.  Upon discovery of the breach, the CE filed a police report to recover the stolen item.  As a result of OCR's investigation, the CE provided confirmation that there was encryption software and multi-layered password protection software installed on the stolen laptop.  OCR determined that the impermissible disclosure of ePHI did not constitute a breach under the Privacy Rule's breach notification rule and provided technical assistance to the CE regarding the requirements of the breach notification rule.
Breach report: UnityPoint Health Affiliated Covered Entity (\UnityPoint\) (IA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 02/01/2013-08/27/2013
Individuals affected: 1825
Breach report: TSYS Employee Health Plan (GA)
Type of breach: Theft
Location of breached information: E-mail
Date of breach: 9/5/2013
Individuals affected: 5232
Business associate involved: Paragon Benefits, Inc.
Breach report: University of California, San Francisco (CA)
Type of breach: Theft
Location of breached information: Laptop, Paper
Date of breach: 9/9/2013
Individuals affected: 3553
Breach report: Reconstructive Orthopaedic Associates II, P.C. d/b/a Rothman Institute (PA)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 03/18/2013-05/13/2013
Individuals affected: 2350
Breach report: Group Health Cooperative (WA)
Type of breach: Other
Location of breached information: Paper
Date of breach: 9/16/2013
Individuals affected: 1015
Breach report: Schuylkill Health System (PA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/7/2013
Individuals affected: 2810
Breach report: CaroMont Medical Group (NC)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 8/5/2013
Individuals affected: 1310
Breach report: Mount SInai Medical Center (NY)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 8/6/2013
Individuals affected: 1586
Breach report: Memorial Hospital of Lafayette County (WI)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 8/3/2013
Individuals affected: 4330
Business associate involved: Healthcare Management System
Breach report: Saint Louis University (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 7/25/2013
Individuals affected: 3100
Breach report: MUSC Physicians & MUHA (SC)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 6/30/2013
Individuals affected: 7120
Business associate involved: BlackHawk
Breach report: Ferris State University - MI College of Optometry (MI)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 12/1/2011
Individuals affected: 3947
Breach report: Access Counseling, LLC (IN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/23/2013
Individuals affected: 566
Breach report: Rose Medical Center (CO)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 06/28/2013 - 07/16/2013
Individuals affected: 606
Breach report: BriovaRx (IL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 07/03/2013 - 07/11/2013
Individuals affected: 1067
Breach report: North Country Hospital and Health Center, Inc (VT)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 9/18/2013
Individuals affected: 550
Breach report: Hope Community Resources, Inc. (AK)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 8/19/2013
Individuals affected: 1556
Breach report: Broward Health Medical Center (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 10/01/2012 - 12/31/2012
Individuals affected: 960
Breach report: Sentara Healthcare (VA)
Type of breach: Theft
Location of breached information: Electronic Medical Record, Paper
Date of breach: 10/01/2012 - 07/11/2013
Individuals affected: 3645
Breach report: Mount Sinai Medical Center (NY)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 8/1/2013
Individuals affected: 610
Breach report: Texas Health Presbyterian Dallas Hospital (TX)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 8/22/2013
Individuals affected: 949
Breach report: Seton Healthcare Family (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 10/4/2013
Individuals affected: 5500
Breach report: BRONX-LEBANON HOSPITAL CENTER (NY)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 9/23/2009
Individuals affected: 10930
Business associate involved: PROFESSIONAL TRANSCRIPTION SERVICES
Breach report: Martin Luther King Jr. Health Center, Inc. (NY)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 9/23/2009
Individuals affected: 37000
Business associate involved: PROFESSIONAL TRANSCRIPTION SERVICES
Breach report: SSM St. Mary's Health Center (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 7/25/2013
Individuals affected: 1300
Business associate involved: Saint Louis University
Breach report: Good Samaritan Hospital (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 7/8/2013
Individuals affected: 3833
Breach report: SSM Health Care of Wisconsin DBA: St. Mary's Janesville Hospital (WI)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 8/27/2013
Individuals affected: 631
Breach report: AHMC Healthcare Inc. and affiliated Hospitals (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 10/12/2013
Individuals affected: 729000
Breach report: Greater Dallas Orthopaedics, PLLC (TX)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 8/30/2013
Individuals affected: 5840
Breach report: Spirit Home Health Care, Corp (FL)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 9/19/2013
Individuals affected: 603
Business associate involved: Spirit Home Health Care, Corp
Breach report: Rotech Healthcare Inc. (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Laptop
Date of breach: 11/26/2010 - 10/01/2013
Individuals affected: 10680
Breach report: Reimbursement Technologies, Inc. (PA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 05/01/2013 - 07/26/2013
Individuals affected: 2300
Breach report: Comprehensive Psychological Services LLC (SC)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 10/28/2013
Individuals affected: 3500