Skip to content
Network USA

HHS OCR report · 2019

Las Colinas Orthopedic Surgery & Sports Medicine, PA data breach

Las Colinas Orthopedic Surgery & Sports Medicine, PA, a healthcare provider in Texas, reported a breach affecting 76,000 individuals to HHS OCR on Jan 18, 2019.

OCR report facts

Covered entity
Las Colinas Orthopedic Surgery & Sports Medicine, PA
Entity type
Healthcare Provider
State
Texas
Individuals affected
76,000
Submission date
Jan 18, 2019
Type of breach
Theft
Location of breached information
Other Portable Electronic Device
Business associate present
Yes
Status
Archive (closed)

OCR description

On November 20, 2018, the covered entity’s (CE) business associate (BA), Zthernet, discovered that a workforce member’s unencrypted data drive was stolen from the workforce member’s vehicle. The stolen drive contained the electronic protected health information (ePHI) of 76,000 individuals, including patients’ names and dates of birth. The CE provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions listed ...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Las Colinas Orthopedic Surgery & Sports Medicine, PA data breach?

The report to HHS OCR lists 76,000 individuals affected.

When was it reported to HHS?

It was submitted to HHS OCR on Jan 18, 2019.

What type of breach was it?

The OCR portal lists the type of breach as Theft, with the breached information located in: Other Portable Electronic Device.

Is the investigation still open?

No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.

Is a breach notice letter from Las Colinas Orthopedic Surgery & Sports Medicine, PA legitimate?

This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Las Colinas Orthopedic Surgery & Sports Medicine, PA.