Pedes Orange County
Disclosed Jan 12, 20188 years ago917 affectedConfirmed
On November 14, 2017, PEDES Orange County, Inc., the covered entity (CE), discovered that a physician from another medical group accessed the CE’s electronic medical records (EMR) database and disclosed such information to an unauthorized individual, affecting 917 individuals. The types of protected health information (PHI) involved in the breach included patients’ names and clinical information. The CE provided breach notification to HHS, affected individuals, and the media and established a dedicated call center to assist individuals affected by the breach incident. Following the breach and in response to OCR’s investigation, the CE suspended the physician’s access to its EMR system and implemented technical safeguards including a new EMR system with increased access controls. OCR provided technical assistance on the Security Rule.
What is known
| People affected | 917 (as reported to HHS) |
|---|---|
| Disclosed | Jan 12, 2018 |
| Happened | Nov 14, 2017 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Government · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Pedes Orange Countyoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Pedes Orange County (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jan 12, 2018 | |
| HHS archivetotal | Jan 12, 2018 | 917 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 917 · backfill source
- 2026-09-25 · summary: empty to On November 14, 2017, PEDES Orange County, Inc., the covered entity (CE), discovered that a physician from another medical group accessed the CE’s electronic medical records (EMR) database and disclosed such information to an unauthorized i · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.