COHHS OCRFirst filing
Filed Sep 28, 2013bd_806aae0f8d6df286
On August 27, 2013, an unencrypted laptop was stolen from a locked supply closet at Littleton Podiatry (Littleton, CO), exposing PHI of 3,512 individuals. Data included names, genders, addresses, phone numbers, dates of birth, health insurance information, and detailed medical records (diagnoses, treatments, surgery notes, lab results, prescriptions). The CE notified HHS, affected individuals, media, and police. Post-breach remediation included a risk analysis, risk management plan, full device encryption, and enhanced physical and administrative safeguards. OCR obtained assurances of corrective action completion.
Affected (this filing): 3,512
HIPAA 60-day OK · 32dHHS notified · 32d