John E. Gonzalez DDS

John E. Gonzalez DDS reported the theft of a briefcase containing an unencrypted external hard drive with patient records, including SSNs, driver's license numbers, and health insurance information. The theft occurred on July 25, 2016. The organization notified law enforcement.

On July 25, 2016, a thief broke Dr. John E. Gonzalez DDS's car window and stole a briefcase containing an unencrypted external hard drive with ePHI for approximately 1,025 patients. Exposed data included SSNs, dates of birth, phone numbers, physical/email addresses, health insurance information, and dental images with patient names. The practice notified HHS, affected individuals, and the media, and subsequently acquired an encrypted hard drive. OCR provided technical assistance on breach notification and Security Rule risk management. Submitted to HHS OCR on 2016-08-14. Breached information located on an Other Portable Electronic Device.