About this report
An employee of the covered entity’s (CE) network penetration testing team discovered protected health information (PHI) on open shares in a network attached storage device that could have affected 5,000 individuals if the IT department had not caught the problem in time. There was no indication of a breach and the CE immediately secured the website and notified the facility to delete all emails. The CE implemented a mandatory monthly training for all site managers to include a discussion of all site incidents.
Summary as published by the HHS Office for Civil Rights.
- Organization
- IHS
- State
- MD
- Entity type
- Health Plan
- Individuals affected
- 5,000
- Submission date
- April 15, 2014
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Other
- Business associate present
- No
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals