Back to the register

Walmart Inc.

ArchivedSubmitted 10/17/2019
State
AR
Covered entity type
Healthcare Provider
Individuals affected
4,211
Business associate present
No
Type of breach
Loss
Location of breached information
Other Portable Electronic Device
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

The covered entity (CE), Walmart, Inc., reported that a flash drive that contained the electronic protected health information (ePHI) of approximately 4,211 individuals, was missing. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. The ePHI involved included names, addresses, dates of birth, medical images, and other treatment information. In response to the breach, the CE sanctioned the workforce member involved and retrained all employees on the importance of safeguarding ePHI.

Change history

  • 9/23/2026Added to OCR's archive list

Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source

Records are reproduced as published; entity names and figures are OCR's.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.