KYHHS OCRFirst filing
Filed Jul 28, 2011bd_23491ab757ec7879
University of Kentucky - UK HealthCare reported to HHS on 2011-07-28 a Theft affecting 3,604 individuals. An unencrypted company laptop was stolen from an employee's car. The laptop contained PHI including names, dates of birth, Social Security numbers, medical record numbers, and diagnoses. In response, the CE mandated laptop encryption, provided employee training on mobile device encryption, and refresher HIPAA training. OCR obtained assurances of corrective actions.
Affected (this filing): 3,604
HHS notified