Pacific Ocean Pediatrics (CA) reported to HHS OCR on 2017-05-15 a Theft affecting 18,637 individuals — patients and parents of patients. Three computers and two external hard drives were stolen from the office after a cleaning crew member left an exterior door unlocked. Breached PHI included names, addresses, dates of birth, phone numbers, sex, insurance information, and complete medical histories (symptoms, tests, diagnoses, prescriptions) of pediatric patients. The CE notified law enforcement, HHS, affected individuals, and the media, and subsequently improved physical security, installed a firewall, encrypted PHI-storing devices, and revised policies and procedures.
Affected (this filing): 18,637