Cedars-Sinai Health Systems

Cedars-Sinai Health Systems reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-09-11. 23 Massachusetts residents were affected. The report records the breach type as electronic.

Cedars-Sinai Health System reported the theft of an employee's laptop on June 23, 2014. The device contained temporary files with potentially sensitive patient health information, including Social Security numbers, names, demographic data, medical records, and billing information. The investigation confirmed that patient data was stored on the hard drive at the time of the theft. Cedars-Sinai notified law enforcement, retained forensic experts, and offered one year of identity protection services to affected individuals.

Cedars-Sinai Health System reported to HHS on 2014-09-10 a Theft affecting 33,136 individuals. An employee's unencrypted laptop was stolen in a residential burglary. The laptop was primarily used for pathology software troubleshooting; ePHI was potentially stored in temporary files. Encryption had been disabled by a helpdesk service provider. The CE terminated remote access, notified affected individuals and media, and updated its ePHI encryption policies and procedures following an OCR investigation.

Cedars-Sinai Health System reported the theft of an employee's laptop on June 23, 2014. The device, used for clinical laboratory reporting troubleshooting, was stolen in a burglary at the employee's home. Although password-protected, it lacked encryption, potentially exposing temporary files containing patient health information, including medical record numbers, lab results, and some Social Security numbers. Remote access was terminated, and forensic experts reviewed the files. Patients were notified in late August 2014.