Riverside County Regional Medical Center

Riverside County Regional Medical Center reported the loss of a password-protected laptop used by its Ophthalmology and Dermatology clinics. The laptop, missing as of December 1, 2014, potentially contained unencrypted patient information including names, addresses, dates of birth, Social Security numbers, and clinical data such as diagnoses and treatments. The organization notified law enforcement and offered one year of identity protection services to affected individuals.

Riverside County Regional Medical Center (RCRMC) reported to HHS OCR on 2015-01-29 a Theft affecting 7,925 individuals. A laptop was lost or stolen at the facility on or around December 1, 2014. ePHI involved included names, Social Security numbers, and clinical information. RCRMC notified law enforcement, affected individuals, and media. Remediation included encrypting all laptops, reconfiguring web-cache settings, and addressing security management program gaps per OCR guidance.

Riverside County Regional Medical Center reported the loss of a laptop containing patient names, dates of birth, medical record numbers, and nerve conduction study results. The device was missing between June 17 and 18, 2014. No SSNs or insurance info were present. The incident is under active investigation by hospital staff and law enforcement.

Riverside County Regional Medical Center (CA) reported to HHS on 2014-06-24 a Theft affecting 563 individuals. On or around June 18, 2014, a laptop used with an EMG machine was lost or stolen. The laptop contained ePHI including patient names, medical record numbers, dates of birth, ages, genders, heights/weights, clinical data, and study reports. OCR investigated this breach jointly with two additional lost/stolen laptop incidents within six months. The CE implemented corrective actions including encryption, physical security improvements, and process changes.