Foundations Recovery Network

Foundations Recovery Network (TN, Healthcare Provider) reported to HHS on 2013-08-15 an Unauthorized Access/Disclosure breach affecting 5,690 individuals. A password-protected but unencrypted laptop was stolen from an employee's car. PHI exposed included names, dates of birth, addresses, phone numbers, SSNs, diagnoses, level of care, dates of service, and health insurance identifiers. Two of three suspects were arrested. OCR obtained assurances that corrective actions — including a no-unencrypted-laptop policy, risk assessment, and compliance structure — were implemented.

Foundations Recovery Network reported the theft of an employee's company laptop on June 15, 2013. The laptop contained unencrypted but password-protected personal and health information of 4 New Hampshire residents, including names, dates of birth, SSNs, and medical diagnoses. The company disabled access, changed passwords, implemented new laptop security policies, and offered credit monitoring.

Foundations Recovery Network reported the theft of an employee's company laptop on June 15, 2013. The laptop contained patient information including names, dates of birth, addresses, telephone numbers, social security numbers, and medical information such as diagnoses and health insurance details. The organization notified affected individuals on June 21, 2013, and offered one year of complimentary identity protection services through Experian.

Foundations Recovery Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2012-06-06. 3 Massachusetts residents were affected.