Rotech Healthcare Inc.

Rotech Healthcare Inc. reported to HHS on August 11, 2016, an unauthorized disclosure incident affecting 957 patients. Employees printed medical records from the electronic medical records system and removed them from the office. The compromised information included names, Social Security numbers, dates of birth, addresses, and phone numbers. The breach involved physical paper records which were later recovered by the Secret Service.

Rotech Healthcare, Inc. notified Montana patients of a breach where paper records containing PHI and PII (SSN, name, address) were found in possession of an unauthorized individual and recovered by law enforcement. Investigation ongoing; forensic investigators retained; credit monitoring offered.

Rotech Healthcare Inc. (FL) reported to HHS on 2013-10-29 an Unauthorized Access/Disclosure affecting 10,680 individuals. A former employee removed and retained electronic files from a company laptop, some containing PHI of employees covered by the entity's group health plan. Demographic, clinical, and financial information was exposed. OCR obtained assurances of completed corrective actions including USB port disablement, laptop encryption, HIPAA gap analysis, and employee retraining.

Rotech Healthcare Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-10-28. 62 Massachusetts residents were affected. The report records the breach type as electronic.

Rotech Healthcare Inc. notified the NH AG of a breach involving a former employee who inadvertently removed files containing PII (names, SSNs, health info) of employees and dependents in Nov 2010. The incident was discovered on Aug 30, 2013, when the former employer notified Rotech. 20 NH residents affected. Notifications sent Oct 24, 2013.