Healthcare Provider · Archived
The Affiliated Sante Group
550 individuals · submitted January 31, 2017
About this report
A contractor for the covered entity (CE) posted software code on an open source online forum without the permission of the CE and inadvertently posted a directory containing the protected health information (PHI) of 550 individuals. The types of PHI involved in the breach included names, addresses, dates of birth, and social security numbers. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE ensured that the directory was deleted from the forum and terminated its relationship with the contractor. OCR reviewed the CE's risk analysis to ensure compliance with the HIPAA Security Rule.
Summary as published by the HHS Office for Civil Rights.
- Organization
- The Affiliated Sante Group
- State
- MD
- Entity type
- Healthcare Provider
- Individuals affected
- 550
- Submission date
- January 31, 2017
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Electronic Medical Record
- Business associate present
- Yes
- OCR status
- Archived
More breach reports in MD
MD · Sep 3, 2026
District of Columbia, Department of Health Care Finance
399,086 individuals
MD · Jul 30, 2026
Pennsylvanie Dermatology Partners
500 individuals
MD · Apr 17, 2026
ASC Ortho Management Company, LLC d/b/a Aligned Orthopedic Partners
7,213 individuals
MD · Mar 25, 2026
Medi-Rents & Sales, Inc.
1,524 individuals
MD · Feb 2, 2026
Mindoula Health, Inc.
626 individuals
MD · Feb 2, 2026
MCS, P.C.
3,478 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals