INDIANAHHS OCRFirst filing
Filed Nov 5, 2012bd_dde430f0e456ecdd
Indiana University (Health Plan, IN) reported to HHS on 2012-11-05 a Theft affecting 3,266 individuals. An unencrypted laptop was stolen from the car of an employee (medical resident). The ePHI exposed included names, medical record numbers, birth dates, diagnosis codes, and Social Security numbers. Breached information located on a Laptop. Following the breach, the entity audited the department, retrained staff, updated HIPAA policies, and encrypted its laptops. OCR obtained written assurances of corrective action.
Affected (this filing): 3,266
HHS notified