District Medical Group, Privacy Manager Breach

District Medical Group (AZ) reported to HHS on 2014-12-12 an Unauthorized Access/Disclosure affecting 616 individuals. A workforce member used a thumb drive while working from home, causing its contents — including names, addresses, SSNs, transaction amounts, and clinical information — to become accessible on the Internet. Breached information was on an Other Portable Electronic Device. The CE notified HHS, individuals, and media; revised policies; and retrained staff. OCR obtained corrective-action assurances.