OhioHealth (OH) reported to HHS on 2015-07-24 a Loss affecting 1,006 individuals. On May 29, 2015, an unencrypted thumb drive went missing, exposing patients' names, medical record numbers, insurance company names, addresses, dates of birth, physicians' names, referral/treatment dates, procedure types, clinical information, and in some cases SSNs. The CE notified affected individuals and media, retrained and sanctioned the responsible employee, suspended thumb drive use in the affected department, encrypted mobile storage devices, and revised policies and annual compliance training.
Affected (this filing): 1,006