New York State Office of Mental Health (NY) reported to HHS OCR on 2015-04-10 a Loss affecting 563 individuals. A workforce member lost an unencrypted (password-protected) laptop in a New York City taxicab. The device contained PHI of research participants at the Nathan S. Kline Institute for Psychiatric Research, including names, phone numbers, ages/birthdates, and coded diagnostic/assessment data. No business associate was involved. The CE notified HHS, media, and affected individuals, offered identity protection services, and implemented encryption, network access controls, and policy reforms. OCR obtained assurances of corrective action.
Affected (this filing): 563