Skip to content
Network USA

HHS OCR report ยท 2021

Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care data breach

Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care, a healthcare provider in Washington, reported a breach affecting 1,166 individuals to HHS OCR on Jun 4, 2021.

OCR report facts

Covered entity
Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care
Entity type
Healthcare Provider
Individuals affected
1,166
Submission date
Jun 4, 2021
Type of breach
Theft
Location of breached information
Other Portable Electronic Device
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), NorthWest Congenital Heart Care, reported that an unencrypted external hard drive was stolen from one of its offices. The hard drive contained the electronic protected health information (ePHI) of 1,166 individuals. The ePHI involved included names, dates of birth, diagnoses, and health insurance and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE strengthened its administra...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Pediatrix Cardiology of Washington, P.C. d/b/a NorthWest Congenital Heart Care.