Bay Area Pain Medical Associates
Disclosed Jul 16, 201412 years ago2,780 affectedConfirmed
The offices of the covered entity (CE), Bay Area Pain Management Associates, were broken into and three desktop computers were stolen. One unencrypted document on a stolen computer contained the names, and dates of service of 2,780 individuals. In response to the breach the CE improved physical safeguards by adding a security alarm system, and increasing security features on doors. The CE improved technical safeguards by implementing an encryption file management program. As a result of OCR’s investigation the CE improved its HIPAA practices.
What is known
| People affected | 2,780 (as reported to HHS) |
|---|---|
| Disclosed | Jul 16, 2014 |
| Happened | May 19, 2014 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Bay Area Pain Medical Associatesoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Bay Area Pain Medical Associates (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 16, 2014 | |
| HHS archivetotal | Jul 16, 2014 | 2,780 |
History of this record
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2780 · backfill source
- 2026-09-25 · summary: empty to The offices of the covered entity (CE), Bay Area Pain Management Associates, were broken into and three desktop computers were stolen. One unencrypted document on a stolen computer contained the names, and dates of service of 2,780 individu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.