KPMG LLP (Business Associate) reported to HHS on 2010-08-26 a Theft affecting 956 individuals on behalf of covered entity Newark Beth Israel Medical Center. An employee lost an unencrypted USB drive containing ePHI (names and clinical information). OCR investigated; KPMG encrypted all relevant equipment and devices, reprimanded and retrained the employee, and retrained all staff. OCR verified a proper BA agreement was in place restricting PHI use and requiring safeguarding.
Affected (this filing): 956