Stronghold Counseling Services, Inc. (SD) reported to HHS OCR on 2013-02-21 the theft of a desktop computer from its facility. The device contained PHI for 8,500 individuals, including appointment records, client insurance and payment data, demographics, social security numbers, and client letters/reports. The CE notified HHS, affected individuals, and the media. Post-breach remediation included revised encryption procedures and implementation of a risk analysis/risk management process. OCR provided technical assistance on Security Rule and Breach Notification Rule requirements.
Affected (this filing): 8,500