Southwest Community Health Center

Southwest Community Health Center (CT) reported to HHS OCR on 2017-06-07 a Theft incident affecting 6,000 individuals (later revised to 13,481 after data mining). Thieves broke into two facilities and stole desktop computers and laptops containing unsecured ePHI — including demographic, financial, and clinical information — cached to local hard drives. The CE notified HHS, 7,965 individuals by letter, and 5,516 by substitute notice. Corrective actions included improved physical security, encrypting all workstations/laptops, and ending local ePHI caching. OCR obtained assurances of compliance.