FEDERALHHS OCRFirst filing
Filed Oct 28, 2009bd_e10dfc66cf4d4add
Five desktop computers containing unencrypted electronic protected health information (e-PHI) were stolen from Mid America Kidney Stone Association, LLC. The breach, reported to HHS on October 28, 2009, affected 1000 individuals and included demographic and financial information. Following the incident and an OCR investigation, the company enhanced physical security with motion detectors and alarm systems, improved technical safeguards with antivirus and encryption software, and updated its computer password policy.
Affected (this filing): 1,000
HHS notified