ScortonAI/Cyber-Security-Breaches huggingface dataset:
Breach report: Proveedores Aliados por tu SAlud (PR)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/12/2012
Individuals affected: 4645
Business associate involved: Quantum Health Consulting
OCR opened an investigation of the covered entity (CE), First Proveedores Aliados Por Tu Salud, after it reported an unencrypted laptop computer and external hard drive containing the electronic protected health information (ePHI) of 4,645 individuals were stolen from a staff member of the CE's business associate (BA), Quantum Health.  The ePHI included names, age, sex, social security numbers, medical services provided, diagnosis codes, and the dates of service.  Upon discovery of the breach, the CE filed a police report and provided breach notification to all individuals affected by the breach, HHS, and the media.  As a result of OCR's investigation, the CE had its BA conduct a risk analysis and implemented new security policies and procedures to ensure adequate safeguards to protect ePHI and retrain its employees.  In addition, the CE also had its BA change its security practices to include encryption on all laptops and restricted the use of portable media devices.
Breach report: Centro de Servicios de Cuidados Dirigidos, Inc. d/b/a Metro Salud grupo Profesional (PR)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/11/2012
Individuals affected: 27098
Business associate involved: T&P Consulting, INC. d/b/a Quantum Health Consulting
OCR opened an investigation of the covered entity (CE), Centro De Servicios de Cuidados Dirigidos, Inc. d/b/a Metro Salud grupo Profesional, after it reported an unencrypted laptop computer and external hard drive containing the electronic protected health information (ePHI) of 27,098 individuals were stolen from a staff member of the CE's business associate (BA), Quantum Health.  The ePHI included names, age, sex, social security numbers, medical services provided, diagnosis codes, and the dates of service.  Upon discovery of the breach, the BA filed a police report and provided breach notification to the media, and all affected individuals.  The CE provided breach notice to HHS.  As a result of OCR's investigation, the CE had its BA conduct a risk analysis and implemented new security policies and procedures to ensure adequate safeguards to protect ePHI and retrain its employees.  In addition, the CE also had its BA change its security practices to include encryption on all laptops and restricted the use of portable media devices.  The CE also terminated its BA agreement with the BA.  The breach incident involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR verified that the CE had a proper BA agreement in place that restricted the BA's use and disclosure of PHI and required the BA to safeguard all PHI.
Breach report: Kern Medical Center  (CA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 2/25/2012
Individuals affected: 1431
Breach report: William F. DeLuca Jr., M.D. (NY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/16/2012
Individuals affected: 577
OCR opened an investigation of the covered entity (CE) after it reported two unencrypted laptops were stolen that contained the electronic protected health information (ePHI) of 577 individuals.  The ePHI included names and pictures.  Upon discovery of the breach, the CE filed a police report to recover the stolen items.  As a result of OCR's investigation, the CE encrypted its computers, changed the locks to a numbered key system, and installed a lock to secure portable devices in storage.  In addition, the CE started using identification numbers instead of names on patients' files.  The CE also revised its security policy and trained all staff on its policies.
Breach report: Grupo Medico IPA -341 (PR)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/11/2012
Individuals affected: 7923
Business associate involved: Quantum Health Consulting
An unencrypted laptop computer and an external hard drive containing the electronic protected health information (ePHI) of 7,923 individuals were stolen from a staff member of the CE's business associate (BA).  The ePHI included names, ages, gender, social security numbers, medical services provided, diagnosis codes, and dates of service.  Upon discovery of the breach, the CE filed a police report to recover the stolen items.  The CE also provided breach notification to all affected individuals, HHS, and the media. As a result of OCR's investigation, the CE had its BA conduct a risk analysis, implement new security policies and procedures to ensure adequate safeguards to protect ePHI, and retrain its employees. The CE also had its BA change its security practices to include encryption on all laptops and restrict the use of portable media devices.
Breach report: Advanced Clinical Research Institute (CA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 1/26/2012
Individuals affected: 875
Breach report: Access Medical Group -IPA 344 (PR)
Type of breach: Theft
Location of breached information: Laptop, Other Portable Electronic Device
Date of breach: 1/11/2012
Individuals affected: 7606
Business associate involved: T&P Consulting, INC DBA Quantum HC
An unencrypted laptop computer and external hard drive containing the electronic protected health information (ePHI) of 39,609 individuals were stolen from a staff member of the covered entity's (CE) business associate (BA).  The ePHI included names, ages, sex, social security numbers, medical services provided, diagnosis codes, and dates of service.  Upon discovery of the breach, the CE filed a police report and provided breach notification to HHS, the media and all affected individuals.  As a result of OCR's investigation, the CE had its BA conduct a risk analysis, implement new security policies and procedures to ensure adequate safeguards to protect ePHI, and retrain its employees.  In addition, the CE also had its BA change its security practices to include encryption on all laptops and restrict the use of portable media devices. OCR obtained assurance that the CE implemented the corrective action listed above and required one additional corrective action.  OCR identified the need for the CE to implement certain security policies, procedures and controls.
Breach report: Georgia Health Sciences University (GA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/18/2012
Individuals affected: 513
Breach report: Baylor Heart and Vascular Center, LLP (TX)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 1/26/2012
Individuals affected: 1972
Breach report: Chicago Musculoskeletal Institute/Metro Orthopedics (IL)
Type of breach: Other
Location of breached information: Network Server
Date of breach: 12/31/2011
Individuals affected: 750
Breach report: Tufts Associated Health Maintenance Organization, Inc. and Tufts Insurance Company (MA)
Type of breach: Other
Location of breached information: Paper
Date of breach: 01/17/2012-02/02/2012
Individuals affected: 3482
Business associate involved: Caremark PCS Health, L.L.C. (formerly known as Caremark PCS Health, L.P.)
Breach report: Duke University Health System (NC)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 07/01/2008 - 11/30/2011
Individuals affected: 1370
Breach report: St. Joseph's Medical Center (CA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 2/2/2012
Individuals affected: 712
Breach report: UnitedHealth Group health plan single affiliated covered entity (MN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 6/28/2011
Individuals affected: 3537
Breach report: CenterLight Healthcare (NY)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 1/27/2012
Individuals affected: 642
Breach report: Lake Granbury Medical Center (TX)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 2/13/2012
Individuals affected: 502
Breach report: County of Wayne Department of Personnel/Human Resources Benefits Administration Division (MI)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 3/16/2012
Individuals affected: 1229
Breach report: St. Elizabeth's Medical Center (MA)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 2/1/2012
Individuals affected: 6831
Breach report: The Neighborhood Christian Clinic (AZ)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 2/7/2012
Individuals affected: 9565
Breach report: AccentCare Home Health of California, Inc. Medicare # 057564    CA state License # 080000226 (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 04/20/2012 - 04/21/2012
Individuals affected: 1000
Breach report: Seton Health Plan (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 3/9/2012
Individuals affected: 555
Business associate involved: HealthLOGIX
Breach report: awklein a med corp (CA)
Type of breach: Theft
Location of breached information: Other
Date of breach: 2/1/2011
Individuals affected: 2000
Business associate involved: David Charles Rish
Breach report: Utah Department of Health (UT)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 03/10/2012-04/02/2012
Individuals affected: 780000
Business associate involved: Utah Department of Technology Services
Breach report: IU Medical Group (IN)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 4/11/2012
Individuals affected: 1000
Breach report: Rhinebeck Health Center/Center for Progressive Medicine (NY)
Type of breach: Theft
Location of breached information: Desktop Computer, Network Server
Date of breach: 11/15/2011-12/14/2011
Individuals affected: 6745
The CE's network server and two local computers were hacked and compromised by a computer virus which resulted in the disclosure of electronic protected health information (ePHI) of 6,745 individuals.  The ePHI included names, insurance numbers, diagnoses, medical histories, dates of birth, telephone numbers, and social security numbers.  Upon discovery of the breach, the CE shut down all computer and email systems to prevent unauthorized access to its network and core files.  In addition, the CE decommissioned the previously used server, deactivated the network router, disabled network access to ePHI, and discontinued the previously utilized backup.  As a result of OCR's investigation, the CE deployed a new real-time firewall and intrusion detection system and implemented new measures for software management.  In addition, the CE installed a new network server, deployed a new router with security subscription to actively monitor internal network traffic and external threat patterns, and implemented a centralized antivirus software system.
Breach report: Memorial Healthcare System (FL)
Type of breach: Other
Location of breached information: Other
Date of breach: 08/01/2011 - 02/12/2012
Individuals affected: 9497
Breach report: Roy E. Gondo, M.D. (WA)
Type of breach: Theft
Location of breached information: Desktop Computer, Electronic Medical Record
Date of breach: 2/21/2012
Individuals affected: 2100
Breach report: DRD Management, Inc. D/B/A DRD Knoxville Medical Clinic - Central (TX)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 2/16/2012
Individuals affected: 1000
Breach report: Emory Healthcare (GA)
Type of breach: Unknown, Other
Location of breached information: Other
Date of breach: 02/07/2012 - 02/20/2012
Individuals affected: 315000
Breach report: Rex Smith, DPM -Rex Smith Podiatry  (OR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 2/19/2012
Individuals affected: 20915
Breach report: Desert AIDS Project (CA)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 4/12/2012
Individuals affected: 4400
Breach report: University of Arkansas for Medical Sciences (AR)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 2/15/2012
Individuals affected: 7121
Breach report: TLC DENTAL DANIA, LLC (FL)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 4/23/2012
Individuals affected: 750
Breach report: South Carolina Department of Health and Human Services (SC)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 01/31/2012 - 04/02/2012
Individuals affected: 228435
Breach report: Oregon Health Authority (OR)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 4/13/2012
Individuals affected: 550
Breach report: SHIELDS For Families  (CA)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 2/27/2012
Individuals affected: 961
Breach report: Safe Ride Services, Inc (AZ)
Type of breach: Unauthorized Access/Disclosure, Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 8/31/2011
Individuals affected: 42000
Breach report: IntraCare North Hospital (TX)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 03/15/2011 - 08/18/2011
Individuals affected: 750
Breach report: Oakland Vision Services, PC (MI)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 4/9/2012
Individuals affected: 3000
Breach report: Stephen Haggard, DPM Podiatry  (WA)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 3/4/2012
Individuals affected: 1597
Breach report: Baptist Health System (AL)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 3/8/2012
Individuals affected: 1655
Breach report: University of Houston for UH College of Optometry (TX)
Type of breach: Unauthorized Access/Disclosure, Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 02/22/2012-02/23/2012
Individuals affected: 7000
Breach report: Rite Aid Store 1343 (WV)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 3/26/2012
Individuals affected: 2905
Breach report: Iowa Department of Human Services (IA)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 02/06/2012 - 03/14/2012
Individuals affected: 3000
Breach report: Hogan Services Inc. Health Care Premium Plan (MO)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 3/30/2012
Individuals affected: 1134
Breach report: Family HealthServices Minnesota, P.A. (MN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 3/30/2012
Individuals affected: 4000
Breach report: St. Mary Medical Center (CA)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 5/7/2012
Individuals affected: 3900
Breach report: Fairview Health Services (MN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 7/25/2011
Individuals affected: 623
Business associate involved: Accretive Health
Breach report: Our Lady of the Lake Regional Medical Center (LA)
Type of breach: Theft, Loss
Location of breached information: Laptop
Date of breach: 3/16/2012
Individuals affected: 17000
Breach report: UnitedHealth Group health plan single affiliated covered entity (MN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 06/28/2011 - 12/12/2011
Individuals affected: 19100
Breach report: West Dermatology (CA)
Type of breach: Theft
Location of breached information: Other
Date of breach: 04/21/2012 - 04/22/2012
Individuals affected: 1900
Breach report: Duke University Health System (NC)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 04/21/2004-02/16/2012
Individuals affected: 591
Breach report: Luz Colon, DPM  Podiatry  (FL)
Type of breach: Theft, Loss
Location of breached information: Laptop
Date of breach: 3/20/2012
Individuals affected: 1137
Breach report: Ameritas Life Insurance Corp.  (NE)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 3/21/2012
Individuals affected: 3000
Breach report: Children's Hospital Boston (MA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 3/25/2012
Individuals affected: 2159
Breach report: Upper Valley Medical Center (OH)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 10/01/2010-03/21/2012
Individuals affected: 15000
Business associate involved: Data Image, Inc.
Breach report: Physician's Automated Laboratory (CA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 03/23/2012 - 03/26/2012
Individuals affected: 745
Breach report: Phoebe Putney Memorial Hospital, Inc.  (GA)
Type of breach: Theft
Location of breached information: Electronic Medical Record, Paper
Date of breach: 07/26/2010-03/29/2012
Individuals affected: 12937
Breach report: Independence Physical Therapy (CT)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 8/1/2011
Individuals affected: 925
Breach report: Titus Regional Medical Center (TX)
Type of breach: Loss, Unknown
Location of breached information: Laptop
Date of breach: 3/27/2012
Individuals affected: 5700
Breach report: Titus Regional Medical Center (TX)
Type of breach: Theft
Location of breached information: Other
Date of breach: 3/29/2012
Individuals affected: 500
Breach report: Lutheran Community Services Northwest (WA)
Type of breach: Theft
Location of breached information: Desktop Computer, Other Portable Electronic Device
Date of breach: 03/29/2012-03/30/2012
Individuals affected: 756
Breach report: Volunteer State Health Plan, Inc.  (TN)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 03/16/2012-04/20/2012
Individuals affected: 1102
Breach report: Charlie Norwood VA Medical Center (GA)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 3/30/2012
Individuals affected: 824
Breach report: Mid America Health, Inc. (IN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/6/2012
Individuals affected: 1444
Business associate involved: PrevMED
Breach report: Metcare of Florida, Inc. (FL)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 05/01/2012 - 05/02/2012
Individuals affected: 2557
Breach report: Robert Witham, MD, FACP (OR)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 4/16/2012
Individuals affected: 11136
Breach report: Memorial Sloan-Kettering Cancer Center (NY)
Type of breach: Theft
Location of breached information: E-mail, Other
Date of breach: 08/13/2009-04/12/2012
Individuals affected: 568
The covered entity's (CE) staff member disclosed an unencrypted Microsoft Excel graph to a non-covered entity physician who re-disclosed it to a medical education organization to be used  in a presentation.  In addition, the medical education organization posted the presentation slides on its website.  The graph contained the protected health information (PHI) of 569 individuals and included names, telephone numbers, social security numbers, ages, cities and states of residence, medical record numbers, and clinical information.  Upon discovery of the breach, the CE ensured that the information was removed from the website and deleted, sanctioned the workforce member responsible, and retrained its workforce on the use of a data loss prevention tool and the risks of embedded PHI.  As a result of OCR's investigation, the CE provided OCR with evidence of its technical safeguards and security awareness initiatives and provided assurance that it implemented the corrective action listed above.
Breach report: Gessler Clinic, P.A. (FL)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 05/03/2012-05/04/2012
Individuals affected: 1409
Breach report: University of Kentucky HealthCare (KY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/1/2012
Individuals affected: 4490
Breach report: Wolf & Yun (KY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/24/2012
Individuals affected: 824
Breach report: Karen Kietzman (MT)
Type of breach: Theft
Location of breached information: Laptop, Other Portable Electronic Device
Date of breach: 4/22/2012
Individuals affected: 708
Breach report: Bruce G. Peller, DMD, PA (NC)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Desktop Computer
Date of breach: 4/22/2012
Individuals affected: 9953
Breach report: Sharon L. Rogers, Ph.D., ABPP (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 6/16/2012
Individuals affected: 585
Breach report: Health Texas Provider Network - Cardiovascular Consultants of North Texas (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 03/16/2012 - 05/11/2012
Individuals affected: 2462
Breach report: SwedishAmerican Health System (IL)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 5/31/2012
Individuals affected: 1500
Breach report: River Arch Dental (CA)
Type of breach: Loss, Unauthorized Access/Disclosure, Unknown
Location of breached information: Other Portable Electronic Device
Date of breach: 5/12/2012
Individuals affected: 2533
Business associate involved: Patterson Dental, Inc.
Breach report: Hamner Square Dental  (CA)
Type of breach: Theft, Loss, Unauthorized Access/Disclosure, Unknown
Location of breached information: Other Portable Electronic Device
Date of breach: 5/12/2012
Individuals affected: 1112
Business associate involved: Patterson Dental, Inc
Breach report: Visiting Nurse Services of Iowa (IA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 5/27/2012
Individuals affected: 1298
Breach report: Molalla Family Dental (OR)
Type of breach: Unauthorized Access/Disclosure, Hacking/IT Incident, Other
Location of breached information: Network Server
Date of breach: 5/17/2012
Individuals affected: 4354
Breach report: Pamlico Medical Equipment LLC (NC)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 5/16/2012
Individuals affected: 2917
Breach report: Beth Israel Deaconess Medical Center (MA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/22/2012
Individuals affected: 3900
Breach report: NYU School of Medicine Faculty Group Practice (NY)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 5/22/2012
Individuals affected: 8488
Breach report: Adult & Child Center, Inc. (IN)
Type of breach: Hacking/IT Incident
Location of breached information: Other
Date of breach: 5/10/2012
Individuals affected: 550
Business associate involved: Choices, Inc.
Breach report: The Surgeons of Lake County, LLC (IL)
Type of breach: Other
Location of breached information: Network Server
Date of breach: 06/22/2012-06/25/2012
Individuals affected: 7067
Breach report: Kindred Healthcare Inc d/b/a Kindred Transitional Care and Rehabilitation-Sellersburg (IN)
Type of breach: Theft
Location of breached information: Other
Date of breach: 06/01/2012-06/04/2012
Individuals affected: 1504
Breach report: Jeffrey Paul Edelstein M.D. (AZ)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 5/28/2012
Individuals affected: 4800
Breach report: Northwestern Memorial Hospital (IL)
Type of breach: Theft
Location of breached information: Laptop, Other Portable Electronic Device
Date of breach: 6/11/2012
Individuals affected: 4211