HHS OCR report · 2015
Prima CARE, PC data breach
OCR report facts
- Covered entity
- Prima CARE, PC
- Entity type
- Healthcare Provider
- State
- Massachusetts
- Individuals affected
- 1,651
- Submission date
- Jul 29, 2015
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Paper/Films
- Business associate present
- No
- Status
- Archive (closed)
OCR description
Two binders belonging to a former employee were discovered at Dave’s Beach in Fall River, MA on May 25, 2015. The binders contained the protected health information (PHI) of 1,651 patients of the covered entity (CE), Prima Care, P.C. The PHI predominantly consisted of names, dates of birth, diagnoses, admission and treatment dates, medical record numbers, and hospital account number. For three individuals, the PHI also included partial or complete social security numbers. The CE provided br...
Text as published on the HHS OCR breach portal.
Frequently asked questions
How many people were affected by the Prima CARE, PC data breach?
The report to HHS OCR lists 1,651 individuals affected.
When was it reported to HHS?
It was submitted to HHS OCR on Jul 29, 2015.
What type of breach was it?
The OCR portal lists the type of breach as Unauthorized Access/Disclosure, with the breached information located in: Paper/Films.
Is the investigation still open?
No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.
Is a breach notice letter from Prima CARE, PC legitimate?
This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.
Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Prima CARE, PC.