- State
- NM
- Covered entity type
- Healthcare Provider
- Individuals affected
- 864
- Business associate present
- Yes
- Type of breach
- Hacking/IT Incident
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
On February 27, 2018, the covered entity (CE), Artesia General Hospital, notified OCR of a breach by its business associate (BA), Nuance Communications/Fast Health, that occurred from November 20, 2017, to December 9,2017, when Nuance's computer server was taken offline. The electronic protected health information (ePHI) involved in the breach consisted of approximately 864 patients' names, dates of birth, diagnoses, and other treatment information. OCR opened an investigation of the CE to determine compliance with the Privacy Rule’s BA contract requirements. The CE provided the BA Agreement (BAA) with Nuance and OCR determined that the BAA appears to comply with the requirements specified in the Privacy Rule. OCR opened a separate review of the BA.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.