Luque Chiropractic
Disclosed Nov 17, 20169 years ago1,341 affectedConfirmed
On September 18, 2016, a business associate (BA), EMR4all Inc., notified the covered entity (CE), Luque Chiropractic, Inc., that the BA’s Amazon "S3" storage account was subject to unauthorized access. The breach affected the protected health information (PHI) of approximately 1,341 individuals and included patients’ names, dates of birth, treatment locations, treatment dates, social security numbers, driver’s license numbers, and diagnoses. The CE provided breach notification to affected individuals, the media, and HHS. The CE also provided free credit monitoring for affected individuals. The CE terminated its business relationship with the BA and revised its HIPAA policies and procedures. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.
What is known
| People affected | 1,341 (as reported to HHS) |
|---|---|
| Disclosed | Nov 17, 2016 |
| Happened | May 1, 2016 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Luque Chiropracticoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Luque Chiropractic (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 17, 2016 | |
| HHS archivetotal | Nov 17, 2016 | 1,341 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1341 · backfill source
- 2026-09-25 · summary: empty to On September 18, 2016, a business associate (BA), EMR4all Inc., notified the covered entity (CE), Luque Chiropractic, Inc., that the BA’s Amazon "S3" storage account was subject to unauthorized access. The breach affected the protected heal · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.