Kaiser Permanente Northern California
Disclosed Jul 12, 201610 years ago1,136 affectedConfirmed
Two former employees stole over 2,000 pieces of Clinical Technology ultrasound units and related parts over a period of years, from June 6, 2010, to May 19, 2016. The breach affected approximately 1,136 patients of the covered entity (CE), Kaiser Permanente Northern California and included names, internal medical record numbers, and ultrasound images. The CE provided breach notification to HHS, affected individuals, and the media and also provided substitute notice. Following the breach, the CE reported the theft to the FBI. As a result of this incident, the CE trained staff on safeguarding PHI and proper decommissioning of medical equipment and established quality assurance monitoring processes and quarterly reviews to prevent a similar breach from occurring in the future. In addition, OCR provided the CE with technical assistance regarding its security management process.
What is known
| People affected | 1,136 (as reported to HHS) |
|---|---|
| Disclosed | Jul 12, 2016 |
| Happened | Jun 6, 2010 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Kaiser Permanente Northern Californiaoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Kaiser Permanente Northern California (Health Plan, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 12, 2016 | |
| HHS archivetotal | Jul 12, 2016 | 1,136 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1136 · backfill source
- 2026-09-25 · summary: empty to Two former employees stole over 2,000 pieces of Clinical Technology ultrasound units and related parts over a period of years, from June 6, 2010, to May 19, 2016. The breach affected approximately 1,136 patients of the covered entity (CE), · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.