LSU Healthcare Network (LA) reported to HHS on 2017-05-04 a theft affecting 2,200 individuals. An unencrypted external hard drive containing ePHI — demographic and clinical information used by the Department of Neurology Research — was stolen from business associate LSU Health Sciences Center in New Orleans. The CE notified HHS, affected individuals, and the media. Corrective actions included HIPAA retraining for the involved researcher and restriction of her ePHI access to view-only mode. OCR obtained assurances of implementation.
Affected (this filing): 2,200