Quanterion Solutions, Inc. (a business associate) reported to HHS on 2012-11-01 a Theft affecting 1,017 individuals. An unencrypted thumb drive containing ePHI was stolen by an employee of the BA. ePHI included names, addresses, dates of birth, driver's license numbers, SSNs, claims info, clinical info, diagnosis/conditions, lab results, treatment info, and medications. The covered entity (Surgical Associates of Utica, PC) filed a police report; the employee was arrested. Breach notifications were sent to HHS, media, and affected individuals; credit monitoring was provided. OCR's investigation led the CE to execute a BA agreement. Breached information located on Network Server (thumb drive).
Affected (this filing): 1,017