Children's Medical Center of Dallas (TX) reported to HHS OCR on 2013-07-10 a Theft affecting 2,462 individuals. Breached information located on an unencrypted laptop stolen from its premises between April 4–9, 2013. The ePHI of pediatric patients was exposed. OCR found longstanding HIPAA Security Rule noncompliance—including failure to encrypt devices since at least 2007—and imposed a $3.2 million civil money penalty. A prior 2009 BlackBerry loss incident was also investigated. No business associate was involved.
Affected (this filing): 2,462