Mountain Peaks Family Practice
Disclosed Jul 20, 20206 years ago1,505 affectedConfirmed
Mountain Peaks Family Practice, the covered entity (CE), reported that a workforce member took a patient list containing the protected health information (PHI) of 1,505 individuals. The PHI involved included names and telephone numbers. The CE notified HHS, affected individuals, and the media. The information was taken prior to the workforce member moving to a new medical practice. The CE contacted the former workforce member who stated that he would destroy the patient list and cease contacting the CE’s patients. OCR provided technical assistance to the CE regarding the key components of the HIPAA Privacy and Breach Notification Rules.
What is known
| People affected | 1,505 (as reported to HHS) |
|---|---|
| Disclosed | Jul 20, 2020 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Mountain Peaks Family Practice (Healthcare Provider, UT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 20, 2020 | 1,505 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.