University of Oklahoma Department of Urology (operating as University of Oklahoma Health Sciences Center) reported to HHS OCR on 2015-10-10 a Theft breach affecting approximately 9,300 individuals. An unencrypted laptop used by a former physician in the Pediatric Urology program was stolen from his vehicle. PHI exposed included patients' names, medical record numbers, dates of birth, and in some cases age, physicians' names, and diagnosis/treatment/billing codes. The CE notified HHS, affected individuals, and media. OCR obtained assurances that corrective actions — including additional ePHI device safeguards, workforce retraining, and revised physician exit protocols — were implemented.
Affected (this filing): 9,300