The Office for Civil Rights of the Department of Health and Human Services (HHS) has identified 12 organizations in 2010 on its web site listing HIPAA-covered entities and their business associates that have reported breaches of unsecured protected health information affecting 500 or more individuals.

According the OCR, the following breaches have been reported to the HHS Secretary:

• Montefiore Medical Center (Feb. 20) in New York City: approximately 625 individuals affected, theft of a laptop;
• A private practice (Feb. 20) in San Antonio, Texas: approximately 21,000 individuals affected, theft of a portable electronic device;
• North Carolina Baptist Hospital (Feb. 15) in Winston Salem: approximately 554 individuals affected, theft of paper records;
• University of New Mexico Health Sciences Center (Feb. 8) in Albuquerque: approximately 1,900 individuals affected, breach of a desktop computer;
• PMC Medicare Choice (Feb. 4) in New York City: approximately 605 individuals affected, breach of paper records, business associate: MSO of Puerto Rico;
• MMM Healthcare (Feb. 4) in New York City: approximately 1,907 individuals affected, breach of paper records, business associate: MSO of Puerto Rico;
• Thrivent Financial for Lutherans (Jan. 29) Appleton, Wis.: approximately 9,500 individuals affected, theft of a laptop;
• Shands at the University of Florida (Jan. 27) in Gainesville: approximately 12,580 individuals affected, theft of a laptop;
• Methodist Hospital (Jan. 18) in Houston: approximately 689 individuals affected, theft of a computer;
• Carle Clinic Association (Jan. 13) in Bloomington, Ill.: approximately 1,300 individuals affected, theft of paper records and films;
• Lucille Packard Children’s Hospital (Jan. 11) in Palo Alto, Calif.: approximately 532 individuals affected, breach of a desktop computer; and
• Ashley and Gray Dental Clinic (Jan. 10) in Marshall, Miss.: approximately 9,309 individuals affected, theft of a desktop computer.