Sharp Memorial Hospital reported the theft of an unencrypted laptop and unencrypted external hard drive from a secure storage area. The hard drive stored ePHI of 791 patients including names, dates of birth, prescription information, and family medical history. The OCR breach portal lists 754 individuals affected. The CE notified individuals and media, deployed encryption on portable devices, updated policies, implemented additional safeguards, and retrained workforce. OCR expects an enterprise-wide risk analysis and risk management plan.
Affected (this filing): 754