- State
- AL
- Covered entity type
- Healthcare Provider
- Individuals affected
- 550
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
The covered entity (CE), Lifestyle Therapy & Coaching, updated its website on June 16, 2017, inadvertently leaving an electronic form that could be used to search the CE’s client directory unsecured. A former client notified the CE of this problem on August 13, 2017, and the CE immediately secured the client information. The exposed directory contained names, addresses, telephone numbers, and email addresses for 551 individuals. In response to the breach and OCR's investigation, reviewed its safeguards for electronic protected health information, implemented additional access controls, and revised training procedures. The CE provided breach notification to HHS, affected individuals, the media and on its website. OCR obtained assurances that the CE implemented the corrective actions listed above.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.