On March 12, 2018, RoxSan Pharmacy, Inc. submitted a HIPAA Email Breach to the U.S. Department of Health and Human Services (HHS). Located in Beverly Hills, California, the RoxSan Pharmacy email breach affected 1049 individuals' protected health information. RoxSan Pharmacy, Inc. is classified as a Healthcare Provider.
According to their press release: "
The incident involved the transmission of a data file to a business associate on January 20, 2015. The data file containing the unsecured information was transmitted to only one individual, a business associate in the legal field, with which RoxSan maintains a Business Associate Agreement. However, since the data file was transmitted for non-health-related reasons, the transmission is considered a breach. The unsecured information includes records dated between April 2015 and August 2015, and includes prescription information, patient identification numbers, drug information, physician names, and insurance information. The data file did not contain patient names or addresses or other personal identification information, and RoxSan has not received any indication that the information has been accessed or used by any unauthorized individual."
The HHS Wall of Shame is a website under the jurisdiction of HHS that lists all HIPAA breaches reported within the last 24 months. The Wall of Shame displays breaches that are currently under investigation by the Office for Civil Rights. As part of section 13402(e)(4) of the HITECH Act, the HHS Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals.
The Paubox HIPAA Breach Report analyzes breaches that affected 500 or more individuals as reported in the HHS Wall of Shame.