ScortonAI/Cyber-Security-Breaches huggingface dataset:
Breach report: Lee D. Pollan, DMD, PC (NY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/06/2012-11/15/2012
Individuals affected: 19178
OCR opened an investigation of the covered entity (CE) after it reported an unencrypted laptop was stolen that contained the electronic protected health information (ePHI) of 19,178 individuals.  The ePHI included names, addresses, zip codes, dates of birth, social security numbers, claims information, and diagnosis codes.  Upon discovery of the breach, the CE filed a police report to recover the stolen items.  As a result of OCR's investigation, the CE encrypted the backup drive of the contents of the laptop computer.  The CE also trained all staff on the use of encryption to safeguard data on personal computers and mobile devices.
Breach report: Washington University School of Medicine (MO)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/28/2012
Individuals affected: 1105
Breach report: Riderwood Village (MD)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/18/2012
Individuals affected: 3230
Breach report: WAYNE MEMORIAL HOSPITAL (PA)
Type of breach: Loss
Location of breached information: Other
Date of breach: 12/3/2012
Individuals affected: 1184
Breach report: Baptist Health System (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 8/14/2011
Individuals affected: 678
Breach report: Baillie Lumber Co. Group Health Plan (NY)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 11/27/2012
Individuals affected: 725
Business associate involved: BlueCross BlueShield of Western New York
OCR opened an investigation of the covered entity (CE), Baillie Lumber Co. Group Health Plan, after it reported its business associate (BA), Blue Cross Blue Shield, mailed a monthly premium notice with invoices that contained the protected health information (PHI) of 725 individuals which was never received by the CE.  The PHI included names, member identification numbers, and social security numbers.  The CE provided breach notification to HHS and affected individuals.  Upon discovery of the breach, the BA contacted the U.S. Post Office to inquire about the package that contained the invoices that the CE never received.  As a result of OCR's investigation, the BA revised its invoice process and removed social security numbers and member identification numbers from its invoices.  The BA also improved safeguards by changing its mailing procedures to send invoices to the CE via secure email.  The breach involved a BA and occurred prior to the September 23, 2013, compliance date.  OCR verified that the CE had a proper BA agreement in place that restricted the BA's use and disclosure of PHI and required the BA to safeguard all PHI.
Breach report: The University of Texas MD Anderson Cancer Center (TX)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/30/2012
Individuals affected: 29021
Breach report: Western Wisconsin Medical Association, S.C. - River Falls Medical Clinics (WI)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 05/30/2012-08/31/2012
Individuals affected: 2400
Breach report: Boy Scouts of America Employee Benefit Plan (TX)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 09/15/2012-11/30/2012
Individuals affected: 8911
Business associate involved: RR Donnelley (a sub-BA for UnitedHealth Group)
Breach report: Kmart Corporation (IL)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 1/2/2013
Individuals affected: 16988
Business associate involved: Kmart Pharmacy #7623
Breach report: Community Services NW (AL)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 12/6/2012
Individuals affected: 2400
Breach report: American HomePatient Inc.  (TN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 10/11/2012
Individuals affected: 1103
Business associate involved: LifeGas
Breach report: Yadkinville Chiropractic DCPA (NC)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 2/1/2013
Individuals affected: 1000
Business associate involved: Yadkinville Chiropractic DCPA
Breach report: Intervention Services, Inc. (FL)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/19/2013
Individuals affected: 1200
Breach report: West Georgia Ambulance (GA)
Type of breach: Loss
Location of breached information: Laptop
Date of breach: 12/13/2012
Individuals affected: 500
Breach report: Center for Pain Management, LLC (MD)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/22/2013
Individuals affected: 5822
Breach report: Multiple Health Plans (CA)
Type of breach: Theft, Other
Location of breached information: Paper
Date of breach: 12/7/2013
Individuals affected: 1368
Business associate involved: Coast Healthcare Management, LLC
Breach report: Froedtert Health (WI)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 10/27/2012-12/13/2012
Individuals affected: 43549
Breach report: Jackson Health System (FL)
Type of breach: Other
Location of breached information: Paper
Date of breach: 05/26/2011 - 02/18/2012
Individuals affected: 566
Breach report: Riderwood Village (MD)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/18/2012
Individuals affected: 5270
Breach report: Kindred Healthcare, Inc. d/b/a Kindred Transitional Care and Rehabilitation - Marl (MA)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 12/15/2012-12/17/2012
Individuals affected: 716
Breach report: HomeCare of Mid-Missouri, Inc. (MO)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 12/14/2012
Individuals affected: 4027
Breach report: Heyman HospiceCare at Floyd (GA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/4/2013
Individuals affected: 1819
Breach report: Agency for Health Care Administration (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 11/01/2012 - 12/20/2012
Individuals affected: 1892
Business associate involved: DentaQuest of Florida, Inc.
Breach report: ABQ HealthPartners (NM)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 12/20/2012
Individuals affected: 778
Breach report: Terrell County Health Department (GA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 01/09/2012 -  04/17/2012
Individuals affected: 18000
Breach report: Florida Healthy Kids Corporation (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 11/01/2012-12/20/2012
Individuals affected: 3667
Business associate involved: DentaQuest of Florida, LLC
Breach report: Stronghold Counseling Services Inc (SD)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 12/24/2012
Individuals affected: 8500
Breach report: Arizona Oncology (AZ)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/21/2012
Individuals affected: 501
Breach report: Crescent Health Inc. - a Walgreens Company (CA)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 12/28/2012
Individuals affected: 109000
Breach report: County of San Bernardino, Department of Behavioral Health (CA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 1/12/2013
Individuals affected: 686
Breach report: WOMENS HEALTH ENTERPRISE, INC. (GA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/2/2013
Individuals affected: 3000
Breach report: The Brookdale University Hospital and Medical Center (NY)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 8/11/2012
Individuals affected: 2261
Business associate involved: Standard Register
OCR opened an investigation of the covered entity (CE), The Brookdale University Hospital and Medical Center, after it reported its business associate (BA), Standard Register, inadvertently mailed statements to 2,261 individuals using another affiliated CE's envelopes.  The protected health information (PHI) included names, addresses and financial information.  OCR provided technical assistance to the CE regarding safeguarding PHI.
Breach report: The Brookdale University Hospital and Medical Center (NY)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 9/21/2012
Individuals affected: 28187
Business associate involved: Health Plus Amerigroup
The covered entity's (CE) business associate (BA), Health Plus Amerigroup, mailed an unencrypted compact disk that contained the electronic protected health information (ePHI) of 28,187 individuals to the CE, The Brookdale University Hospital and Medical Center.  OCR closed this breach report and consolidated into an existing breach report filed by OHP PHSP, Inc. regarding the same issues.
Breach report: Ultra Stores, Inc. (IL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 9/13/2012
Individuals affected: 500
Business associate involved: Plexus Group
Breach report: South Miami Hospital (FL)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 6/1/2011
Individuals affected: 834
Breach report: Lancaster General Medical Group (PA)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 2/5/2013
Individuals affected: 527
Breach report: Maine Medical Center (ME)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 2/27/2013
Individuals affected: 1920
Breach report: State of California, Dept. of Developmental Services (CA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 11/10/2012
Individuals affected: 18162
Business associate involved: North Los Angeles County Regional Center
Breach report: Utah Department of Health  (UT)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 01/10/2013-01/11/2013
Individuals affected: 6332
Business associate involved: Goold Health System (Goold)
Breach report: Sports Rehabilitation Consultants (OH)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 2/1/2013
Individuals affected: 1200
Breach report: University of Connecticut Health Center (CT)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 06/07/2010 - 12/07/2012
Individuals affected: 1382
Breach report: United HomeCare Services, Inc. (FL)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/8/2013
Individuals affected: 12299
Breach report: United Home Care Services of Southwest Florida< LLC (FL)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 1/8/2013
Individuals affected: 1318
Business associate involved: United HomeCare Services, Inc.
Breach report: catoctin Dental/Richard B. Love, DDS, PA (MD)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 1/3/2013
Individuals affected: 6400
Business associate involved: Patterson Dental Supply/Patterson Companies
Breach report: Empire Blue Cross Blue Shield (IN)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 11/01/2011-10/01/2012
Individuals affected: 2608
Business associate involved: Connextions c/o Empire BCBS
Breach report: Anthem Blue Cross Blue Shield (OH) (IN)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 11/01/2011-10/01/2012
Individuals affected: 1678
Business associate involved: Connextions c/o Anthem BCBS
Breach report: Anthem Blue Cross Blue Shield (IN) (IN)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Network Server
Date of breach: 11/01/2011-10/01/2012
Individuals affected: 528
Business associate involved: Connextions c/o Anthem BCBS
Breach report: Mount Sinai Medical Center (FL)
Type of breach: Theft
Location of breached information: Desktop Computer, Paper
Date of breach: 10/01/2012 - 02/18/2013
Individuals affected: 628
Breach report: Thomas L. Davis, Jr. DDS (OR)
Type of breach: Theft
Location of breached information: Desktop Computer, Electronic Medical Record
Date of breach: 2/12/2013
Individuals affected: 3269
Breach report: HealthCare for Women, Inc. (MA)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 01/18/2013-01/23/2013
Individuals affected: 8727
Breach report: University of Mississippi Medical Center (MS)
Type of breach: Loss
Location of breached information: Laptop
Date of breach: 11/01/2012-01/19/2013
Individuals affected: 500
Breach report: Granger Medical Clinic (UT)
Type of breach: Theft, Loss, Other
Location of breached information: Paper
Date of breach: 1/17/2013
Individuals affected: 2600
Breach report: Texas Tech Unversity Health Sciences Center (TX)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 2/18/2013
Individuals affected: 697
Breach report: Rite Aid #10217 (RI)
Type of breach: Unknown, Other
Location of breached information: Paper
Date of breach: 2/1/2013
Individuals affected: 2082
Breach report: WA Department of Social and Health Services (WA)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 2/4/2013
Individuals affected: 629
Business associate involved: Sunil Kakar, Psy.D.
Breach report: Carpenters Health & Welfare Trust Fund for California (CA)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 03/11/2013-03/12/2013
Individuals affected: 2400
Business associate involved: QuickRunner, Inc. (dba, RoadRunner Mailing Services)
Breach report: Shands Jacksonville Medical Center, Inc. (FL)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 05/02/2012-06/22/2012
Individuals affected: 1025
Breach report: University of Florida (FL)
Type of breach: Theft, Unauthorized Access/Disclosure, Other
Location of breached information: Network Server
Date of breach: 03/01/2009 - 10/25/2012
Individuals affected: 14519
Breach report: Kmart Corporation (IL)
Type of breach: Theft
Location of breached information: Electronic Medical Record
Date of breach: 3/17/2013
Individuals affected: 12542
Breach report: GLENS FALLS HOSPITAL (NY)
Type of breach: Theft
Location of breached information: Network Server
Date of breach: 11/02/2012 - 03/14/2013
Individuals affected: 2360
Business associate involved: PORTAL HEALTHCARE SOLUTIONS LLC
The covered entity's (CE) business associate (BA) operated a server containing the electronic protected health information (ePHI) of 2,360 individuals that was vulnerable to access by unauthorized persons for over four months.  The ePHI included transcribed doctors' notes, which may have included medical diagnoses, clinical laboratory results, diagnostic imaging reports, emergency department records, and medication administration.  Upon discovery of the breach, the CE engaged a computer forensic expert to investigate the incident and terminated the BA agreement.  As a result of OCR's investigation, the CE ensured that its BA secured the server, verified that the server was no longer accessible from the Internet, and required the BA to return or destroy all of the CE's ePHI.
Breach report: Hospice and Palliative Care Center of Alamance Caswell (NC)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Laptop, Paper
Date of breach: 2/24/2013
Individuals affected: 5370
Breach report: Texas Health Care, P.L.L.C. (TX)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 3/10/2013
Individuals affected: 554
Breach report: Network Health Insurance Corporation (WI)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 2/27/2012
Individuals affected: 3794
Business associate involved: TMG Health
Breach report: Wm. Jennings Bryan Dorn VAMC (SC)
Type of breach: Loss
Location of breached information: Laptop
Date of breach: 2/11/2013
Individuals affected: 7405
Breach report: John J. Pershing VA Medical Center (MO)
Type of breach: Theft
Location of breached information: Paper
Date of breach: 2/20/2013
Individuals affected: 589
OCR opened an investigation of the covered entity (CE), John J. Pershing VA Medical Center, after the CE reported that its business associate (BA), Stress Laboratory, placed a box of unsecured protected health information (PHI) in an equipment storage room.  The PHI included the names, social security numbers, diagnoses, and age of approximately 589 individuals.  This breach incident involved a BA, and occurred prior to the September 23, 2013 compliance date.  The BA employee involved in this matter separated from employment in 2012, and the BA was reorganized and has been incorporated into the CE.  The CE provided breach notification to affected individuals, HHS, and the media.  Substitute notification was provided through a posting on the CE's main website with a toll-free information number.  The CE also offered one year of identity protection and credit monitoring services to affected individuals.  As a result of this incident, the CE adopted a new policy that provides guidance to its staff regarding the handling of PHI.  Additionally, the CE trained its employees on this new policy, and re-trained its employees on the Privacy, Security, and Breach Notification Rules.  Finally, OCR obtained assurances that the CE implemented the corrective action listed above.
Breach report: Oregon Health & Science University (OR)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 2/22/2013
Individuals affected: 1076
Breach report: Schneck Medical Center (IN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 3/14/2013
Individuals affected: 3131
Breach report: The Guidance Center of Westchester (NY)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 2/21/2013
Individuals affected: 1416
Breach report: Hope Hospice (TX)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 12/27/2012 - 02/22/2013
Individuals affected: 818
Breach report: IHC Health Services, Inc. dba Intermountain Life Flight (UT)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 3/28/2013
Individuals affected: 857
Breach report: Valley Mental Health (UT)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 2/27/2013
Individuals affected: 700
Breach report: Delta Dental of Pennsylvania (PA)
Type of breach: Loss
Location of breached information: Paper
Date of breach: 3/20/2013
Individuals affected: 14829
Business associate involved: ZDI
Breach report: Raleigh Orthopaedic Clinic (NC)
Type of breach: Theft, Improper Disposal, Unauthorized Access/Disclosure
Location of breached information: Paper
Date of breach: 1/15/2013
Individuals affected: 17300
Breach report: Laboratory Corporation of America (NC)
Type of breach: Theft
Location of breached information: Desktop Computer
Date of breach: 3/15/2013
Individuals affected: 1580
Breach report: Arizona Counseling & Treatment Services, LLC (AZ)
Type of breach: Theft
Location of breached information: Other Portable Electronic Device
Date of breach: 03/18/2013-03/25/2013
Individuals affected: 3800
Breach report: Wood County Hospital (OH)
Type of breach: Theft
Location of breached information: Other
Date of breach: 3/19/2013
Individuals affected: 2500
Breach report: University of Rochester Medical Center & Affiliates (NY)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 2/15/2013
Individuals affected: 537
Breach report: Orthopedics & Adult Reconstructive Surgery (TX)
Type of breach: Loss
Location of breached information: Other Portable Electronic Device
Date of breach: 03/01/2013 - 03/13/2013
Individuals affected: 22000
Business associate involved: AssuranceMD f/k/a Harbor Group
Breach report: El Centro Regional Medical Center (CA)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 11/7/2012
Individuals affected: 189489
Business associate involved: Digital Archive Management
Breach report: Seattle - King County Department of Public Health (WA)
Type of breach: Improper Disposal
Location of breached information: Paper
Date of breach: 3/7/2013
Individuals affected: 750
Breach report: Regional Medical Center (TN)
Type of breach: Unauthorized Access/Disclosure
Location of breached information: E-mail
Date of breach: 2/4/2013
Individuals affected: 1180
Breach report: Presbyterian Anesthesia Associates PA (NC)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 4/1/2013
Individuals affected: 9988
Business associate involved: E-dreamz, Inc.
Breach report: Integrity Oncology, an office of Baptist Medical Group (TN)
Type of breach: Other
Location of breached information: Desktop Computer
Date of breach: 3/5/2013
Individuals affected: 539
Business associate involved: North Atlantic Telecom, Inc.
Breach report: Piedmont HealthCare, P.A. (NC)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 3/28/2013
Individuals affected: 1924
Business associate involved: E-dreamz, Inc.
Breach report: Indiana University Health Arnett (IN)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 4/9/2013
Individuals affected: 10350
Breach report: Dent Neurologic Group, LLP (NY)
Type of breach: Other
Location of breached information: E-mail
Date of breach: 5/13/2013
Individuals affected: 10000
Breach report: City of Norwood (OH)
Type of breach: Loss
Location of breached information: Laptop
Date of breach: 04/14/2013 - 04/19/2013
Individuals affected: 9577
Breach report: Lutheran Social Services of South Central Pennsylvania (PA)
Type of breach: Hacking/IT Incident
Location of breached information: Network Server
Date of breach: 06/01/2012 - 03/07/2013
Individuals affected: 7803
Breach report: Comfort Dental Marion and Kokomo (IN)
Type of breach: Improper Disposal
Location of breached information: Other
Date of breach: 03/14/2013-03/18/2013
Individuals affected: 5388
Business associate involved: Just the Connection Inc
Breach report: Erskine Family Dentistry (IN)
Type of breach: Hacking/IT Incident
Location of breached information: Desktop Computer
Date of breach: 3/19/2013
Individuals affected: 2723
Breach report: Health Resources of Arkansas (AR)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Other
Date of breach: 4/14/2013
Individuals affected: 1900
Breach report: Various Health Plans (AL)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 04/14/2013-04/15/2013
Individuals affected: 3164
Business associate involved: SynerMed / Inland Valleys IPA
Breach report: Independence Care System (NY)
Type of breach: Theft
Location of breached information: Laptop
Date of breach: 5/7/2013
Individuals affected: 2434
Breach report: Sonoma Valley Hospital (CA)
Type of breach: Other
Location of breached information: Other
Date of breach: 2/14/2013
Individuals affected: 1386
Breach report: University of Florida (FL)
Type of breach: Theft, Unauthorized Access/Disclosure
Location of breached information: Electronic Medical Record
Date of breach: 02/01/2012- 04/11/2013
Individuals affected: 5875
Breach report: Community Support Services, Inc. (OH)
Type of breach: Theft
Location of breached information: E-mail
Date of breach: 03/20/2013-03/26/2013
Individuals affected: 1167