The Office for Civil Rights, a division of the U.S. Department of Health and Human Services, opens investigations into all "breaches of unsecured protected health information affecting 500 or more individuals," according to its website. Source: WBAL-TV11 Baltimore