Cedars-Sinai Health System Defined Benefit Retirement Plan

Cedars-Sinai Health System reported the theft of an employee's laptop on June 23, 2014. The device contained temporary files with potentially sensitive patient health information, including Social Security numbers, names, demographic data, medical records, and billing information. The investigation confirmed that patient data was stored on the hard drive at the time of the theft. Cedars-Sinai notified law enforcement, retained forensic experts, and offered one year of identity protection services to affected individuals.

Cedars-Sinai Health System reported to HHS on 2014-09-10 a Theft affecting 33,136 individuals. An employee's unencrypted laptop was stolen in a residential burglary. The laptop was primarily used for pathology software troubleshooting; ePHI was potentially stored in temporary files. Encryption had been disabled by a helpdesk service provider. The CE terminated remote access, notified affected individuals and media, and updated its ePHI encryption policies and procedures following an OCR investigation.

Affected (this filing):