Skip to content
Network USA

HHS OCR report ยท 2019

Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC") data breach

Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC"), a healthcare provider in Virginia, reported a breach affecting 15,575 individuals to HHS OCR on Nov 27, 2019.

OCR report facts

Covered entity
Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC")
Entity type
Healthcare Provider
Individuals affected
15,575
Submission date
Nov 27, 2019
Type of breach
Hacking/IT Incident
Location of breached information
Email
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), Loudoun Medical Group, doing business as Comprehensive Sleep Care Center, reported that an employee was the victim of an email phishing scheme that affected the protected health information (PHI) of approximately 15,575 individuals. The PHI involved included names, addresses, birthdates, diagnoses, clinical information, and treatment information. The CE notified HHS, affected individuals, the media, and also provided substitute notice. In its mitigation efforts, th...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC") data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC") legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Loudoun Medical Group d/b/a Comprehensive Sleep Care Center ("CSCC").