Counseling and Psychotherapy of Throggs Neck (NY) reported to HHS OCR on 2010-09-21 the theft of a password-protected, unencrypted desktop computer containing PHI of 9,000 individuals. Exposed data included names, addresses, dates of birth, Social Security numbers, diagnoses, patient notes, and demographics. OCR investigated; the CE subsequently encrypted all patient databases, upgraded physical access controls (locks, auto-closing doors, security guards, video surveillance), and formalized its policy documentation per OCR's corrective action requirements.
Affected (this filing): 9,000