ALHHS OCRFirst filing
Filed Feb 2, 2013bd_0ea16923330d677e
Community Services NW (AL) reported to HHS OCR on 2013-02-02 a theft of a desktop computer from a locked medical office, affecting approximately 2,400 individuals. PHI exposed included names, addresses, dates of birth, social security numbers, and clinician information. Post-breach, the entity encrypted PHI in transit and at rest, upgraded facility access controls, updated its device inventory, and—following OCR investigation—developed a risk analysis/management plan and overhauled its privacy and security policies via a third-party contractor.
Affected (this filing): 2,400
HHS notified