- State
- CA
- Covered entity type
- Health Plan
- Individuals affected
- 1,136
- Business associate present
- No
- Type of breach
- Theft
- Location of breached information
- Other Portable Electronic Device
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
Two former employees stole over 2,000 pieces of Clinical Technology ultrasound units and related parts over a period of years, from June 6, 2010, to May 19, 2016. The breach affected approximately 1,136 patients of the covered entity (CE), Kaiser Permanente Northern California and included names, internal medical record numbers, and ultrasound images. The CE provided breach notification to HHS, affected individuals, and the media and also provided substitute notice. Following the breach, the CE reported the theft to the FBI. As a result of this incident, the CE trained staff on safeguarding PHI and proper decommissioning of medical equipment and established quality assurance monitoring processes and quarterly reviews to prevent a similar breach from occurring in the future. In addition, OCR provided the CE with technical assistance regarding its security management process.
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.