FEDERALHHS OCRFirst filing
Filed Oct 7, 2011bd_46d2a5c8e6950f86
Adult & Pediatric Dermatology, PC (APDerm) of Concord, MA reported to HHS OCR on 2011-10-07 a theft affecting 2,200 individuals. An unencrypted thumb drive (other portable electronic device) containing ePHI was stolen from a staff member's vehicle and never recovered. APDerm settled with HHS OCR for $150,000 — the first HITECH Breach Notification Rule settlement — and agreed to a corrective action plan addressing risk analysis, risk management, policies, and workforce training.
Affected (this filing): 2,200
HHS notified