Western Wisconsin Medical Association, S.C. - River Falls Medical Clinics

An employee of a cleaning service stole paper-based protected health information (PHI) for approximately 2,400 patients of Western Wisconsin Medical Association's River Falls Medical Clinic during the summer of 2012. The data, which included names, dates of birth, Social Security numbers, and medical/insurance numbers, was taken from unsecured shredding bins. In response, the clinic implemented secure bins, updated its PHI disposal policies, and retrained staff.