New Dimension Group, LLC (NC, Healthcare Provider) reported to HHS OCR on 2015-11-25 the loss of three unencrypted flash drives discovered missing on September 29, 2015, affecting 1,275 individuals. Exposed PHI included names, dates of birth, Social Security numbers, driver's license numbers, and clinical information. The CE banned flash drive use, implemented device-control policies, deployed email-encryption software, and provided 12 months of free credit monitoring. OCR obtained assurances of corrective action completion.
Affected (this filing): 1,275