Montefiore Medical Center (NY) reported to HHS on 2010-03-09 a Theft affecting 625 individuals. An unencrypted laptop was stolen from the covered entity's mobile dental van. The ePHI included names, dates of birth, medical record numbers, and dental x-rays. Following OCR's investigation, the CE centralized ePHI storage to a data center, encrypted all mobile dental van laptops, improved physical van security, enacted a new ePHI security policy, and retrained all staff. OCR obtained corrective action assurances.
Affected (this filing): 625