Lucile Packard Childrens Hospital, Privacy Manager Breach

Stanford Children's Hospital (SCH, formerly Lucile Packard Children's Hospital) and Stanford School of Medicine (SOM) reported to HHS on 2013-06-13 a Theft breach affecting 12,900 individuals. On May 8, 2013, a workforce member's unencrypted laptop was stolen from a badge-access controlled area of the hospital. SOM owned the laptop; SCH employed the worker. Breached ePHI included clinical and demographic information. Given the pediatric patient population, minor data was involved. The CE responded with law enforcement reporting, individual notification, identity protection services, media notice, and post-breach encryption and policy remediation.