Indiana State Medical Association (a Health Plan in IN) reported to HHS OCR on 2015-03-06 a Theft affecting 38,351 individuals. Two hard drives containing ePHI were stolen from an employee's vehicle. Data involved included names, addresses, dates of birth, Social Security numbers, health insurance information, and clinical information. The CE sanctioned the employee, implemented new safeguards, retrained staff, and offered free credit monitoring. OCR obtained assurances of corrective action.
Affected (this filing): 38,351