Howard R. Jarvis, D.M.D., L.L.C. dba Southwest Portland Dental

On July 1, 2016, Patterson Dental Supply, Inc. a business associate (BA) of the covered entity (CE), Southwest Portland Dental (CE), notified the CE that between April 2012 and January 2016, unauthorized individuals had gained access to a computer network resources site used by both entities to exchange electronic protected health information (ePHI). The breach affected 1,980 of the CE’s patients and the types of ePHI involved included patients’ names, dates of birth and social security numbers. In response the breach, the CE implemented new HIPAA Privacy and Security policies and procedures. The CE provided written notice of the breach to the affected individuals, prominent media outlets, and to HHS. OCR obtained assurances that the CE performed an updated risk analysis.