Morris Heights Health Center reported to HHS on 2011-10-27 a Theft affecting 927 individuals. An unencrypted laptop was stolen from the covered entity's school-based health center in New York. The ePHI included names, dates of birth, sex, ethnicities, anthropometric data (height, weight, BMI), physical examination information (including asthma and obesity data), health action plans, and enrollment dates. The CE filed a police report, encrypted all portable devices, installed tracking software, added physical locks to workstations, and retrained staff on ePHI security policies following an OCR investigation.
Affected (this filing): 927