Thieves broke into PMC Medicare Choice's Humacao, Puerto Rico facility and stole four unencrypted desktop computers containing ePHI of 24,361 health plan members. Compromised data included names, addresses, phone numbers, Medicare HIC numbers, diagnosis and treatment information, health plan names and member IDs, enrollment information, claims information, and Social Security numbers. The covered entity notified HHS, affected individuals, and the media; repaired a damaged wall; improved facility security; and subsequently encrypted all computers at its regional offices. OCR closed the matter with assurances and stated expectations for risk analysis, contingency operations, facility security plan implementation, IT patching, and encryption of ePHI.
Affected (this filing): 24,361