Gulf Coast Health Care Services

Under Review: 
No Review
Date Breach Made Public: 
November 10, 2012
Pensacola , FL
United States
Florida US
Records Breached: 

13,000 (No SSNs or financial information reported)

Breach Total Number: 
HHS via
Year of Breach: 
Type of organization: 
Type of breach: 

A network security incident resulted in the expose of patient information.  The breach occurred on August 17.

UPDATE (11/26/2012): An employee accessed and downloaded patient information without authorization or a legitimate purpose on five occasions between June 29 and September 20 of 2012.  Gulf Coast Health Care Services discovered the issue on September 26.  Patients who were seen between 1992 and September 20, 2012 may have had their names, addresses, dates of birth, and phone numbers accessed.  It appears that the employee was accessing the data for the purpose of helping outside practitioners recruit patients to their own practices.  The incident was reported to the FBI, the Sarasota Police Department, and the Florida Department of Law Enforcement. 

This entry on the Privacy Rights Clearinghouse Chronology of Data Breaches was previously listed as a hack and was reclassified as an insider breach based on new information.