Chesapeake Regional Medical Center (VA) reported to HHS on 2018-04-06 a Theft affecting 2,100 individuals. Two external computer hard drives were stolen from its Sleep Center. Breached PHI included names, dates of birth, medical record numbers, and clinical information (2,111 individuals per description). OCR reviewed CE policies; the CE notified HHS, affected individuals, and media. Corrective actions included additional physical safeguards and a new assessment of all external storage devices.
Affected (this filing): 2,100