An unencrypted laptop and unencrypted desktop computer jointly containing ePHI of 2,334 individuals were stolen during a burglary at Gail Gillespie and Associates, LLC (LA). Stolen data included names (including parent names of minor patients), addresses, phone numbers, DOBs, SSNs, dates of service, diagnoses, prognoses, evaluations, medications, and confidential information from parents/children and schools/doctors/agencies. The covered entity notified HHS, affected individuals, and the media; purchased a monitored alarm system; and following OCR investigation conducted a risk analysis, deployed workstation encryption, and retrained employees. The HHS breach portal lists 2,000 affected individuals, while the narrative cites 2,334 — discrepancy flagged.
Affected (this filing): 2,000