HHS OCR report ยท 2016
Athens Orthopedic Clinic, P.A. data breach
OCR report facts
- Covered entity
- Athens Orthopedic Clinic, P.A.
- Entity type
- Healthcare Provider
- State
- Georgia
- Individuals affected
- 201,000
- Submission date
- Jul 29, 2016
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Electronic Medical Record
- Business associate present
- No
- Status
- Archive (closed)
OCR description
Athens Orthopedic Clinic PA ("Athens Orthopedic") has agreed to pay $1,500,000 to the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) and to adopt a corrective action plan to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules. Athens Orthopedic is located in Georgia and provides orthopedic services to approximately 138,000 patients annually. On June 26, 2016, a journalist notified A...
Text as published on the HHS OCR breach portal.
Frequently asked questions
How many people were affected by the Athens Orthopedic Clinic, P.A. data breach?
The report to HHS OCR lists 201,000 individuals affected.
When was it reported to HHS?
It was submitted to HHS OCR on Jul 29, 2016.
What type of breach was it?
The OCR portal lists the type of breach as Unauthorized Access/Disclosure, with the breached information located in: Electronic Medical Record.
Is the investigation still open?
No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.
Is a breach notice letter from Athens Orthopedic Clinic, P.A. legitimate?
This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.
Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Athens Orthopedic Clinic, P.A..