Healthcare data breaches up but number of records breached slashed

PARCA eNews – Jan. 30, 2017 – The total number of healthcare records breached in 2016 were more than 16.5 million was down substantially from the 113 million records breached in 2015, but the 324 breaches of 500 or more records reported by healthcare organizations was higher than in any other year since the Office of Civil Rights started publishing breach summaries in 2009. 

The vast majority of records breached (9.4 million) resulted from the top twelve breaches  led by the 3.6 million records hacked at Banner Health in Arizona, followed by 2.2 million records records compromised at 21st Century Oncology.               

Name of   Covered Entity State Covered Entity Type # Affected Reported Type Device Breached Banner   Health AZ Healthcare Provider 3,620,000 8/3/16 Hacking/IT Incident Network Server, Other 21st   Century Oncology FL Healthcare Provider 2,213,597 3/4/16 Hacking/IT Incident Network Server Valley   Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain   Consultants AZ Healthcare Provider 882,590 8/12/16 Hacking/IT Incident Network Server County   of Los Angeles Departments of Health and Mental Health CA Healthcare Provider 749,017 12/16/16 Hacking/IT Incident Email Peachtree   Orthopaedic Clinic GA Healthcare Provider 531,000 11/18/16 Hacking/IT Incident Network Server California   Correctional Health Care Services CA Healthcare Provider 400,000 5/15/16 Theft Laptop Central   Ohio Urology Group, Inc. OH Healthcare Provider 300,000 9/23/16 Hacking/IT Incident Network Server Community   Health Plan of Washington WA Health Plan 381,504 12/21/16 Hacking/IT Incident Network Server, Other Premier   Healthcare, LLC IN Healthcare Provider 205,748 3/4/16 Theft Laptop Southeast   Eye Institute, P.A. dba eye Associates of Pinellas FL Healthcare Provider 87,314 5/5/16 Hacking/IT Incident Network Server Medical   Colleagues of Texas, LLP TX Healthcare Provider 68,631 5/11/16 Hacking/IT Incident Network Server Total 9,439,401 Source:   OCR Breach Portal