Lancaster General Medical Group
Disclosed Mar 4, 201313 years ago527 affectedConfirmed
A spreadsheet containing the protected health information (PHI) of 527 individuals was stolen from one of the covered entity's (CE) locations. The PHI involved in the breach included names and dates of birth. Following the breach, the CE notified the local police, provided breach notification to HHS, the media, and the affected individuals, and offered identity protection services to the individuals. The CE attempted to retrieve the PHI. As a result of OCR's investigation, the CE reviewed its policies to prevent a similar incident from occurring in the future. \ \ \
What is known
| People affected | 527 (as reported to HHS) |
|---|---|
| Disclosed | Mar 4, 2013 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Lancaster General Medical Group (Healthcare Provider, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 4, 2013 | 527 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.