- State
- RI
- Covered entity type
- Healthcare Provider
- Individuals affected
- 836
- Business associate present
- No
- Type of breach
- Theft
- Location of breached information
- Paper/Films
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
An individual broke into a CVS Pharmacy in Riverview, Florida during Hurricane Irma and stole completed prescriptions intended for 836 individuals. The type of protected health information (PHI) stolen included patients' first and last names, dates of birth, addresses, medication names, and provider names. The CE assessed the damage and secured the store to prevent any other unauthorized access. OCR reviewed the CE's policies and procedures on uses and disclosure of PHI and safeguarding PHI and obtained assurances that the CE provided breach notification to affected individuals and the media in accordance with the Breach Notification Rule.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.