MASSACHUSETTSHHS OCRFirst filing
Filed Jan 8, 2018bd_923e50e03ce70218
In November 2017, Charles River Medical Associates, PC (MA) discovered that an unencrypted portable hard drive storing monthly backups of bone density studies was missing from the bone density testing workstation. The loss affected 9,387 individuals. PHI involved included patients' names, dates of birth, patient identification numbers, and radiology images. The CE notified HHS, affected individuals, and the media. OCR reviewed policies and procedures and obtained assurances that corrective actions — including workforce retraining, sanctions, and a device audit — were implemented. Breach reported to HHS on 2018-01-08.
Affected (this filing): 9,387
HHS notified