CHI Franciscan Health Hospice (Tacoma, WA) reported to HHS OCR on 2016-11-28 that a backpack containing a laptop and paper copies of medical records was stolen from an employee's vehicle. The breach affected 12,413 individuals. PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The entity implemented physical and technical security safeguards, updated its risk analysis, sanctioned the workforce member, and re-trained all staff. OCR provided technical assistance regarding the HIPAA Security Rule.
Affected (this filing): 12,413