Back to the register
Santa Cruz County Health Services Agency
ArchivedSubmitted 09/02/2016
Updated 20 hours ago ()
- State
- CA
- Covered entity type
- Healthcare Provider
- Individuals affected
- 25,000
- Business associate present
- No
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Paper/Films
- First seen by InfoSec Signals
- Sep 23, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
The covered entity (CE), Santa Cruz County Health Services Agency, reported a breach of unsecured PHI when a break-in occurred at the CE’s storage area. The CE initially reported that the breach affected approximately 25,000 individuals. However, an internal investigation, conducted with law enforcement assistance, revealed later that no breach had occurred because the break-in did not affect the paper records. OCR provided technical assistance to the CE. The CE implemented additional physical safeguards, updated its HIPAA policies and procedures and trained its staff on privacy and security awareness.
Change history
- Sep 23, 2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.