WASHINGTONHHS OCRFirst filing
Filed Jul 8, 2014bd_5c6379bbee9aad92
Haley Chiropractic Clinic (WA) reported to HHS on 2014-07-08 a Theft affecting ~6,000 patients. One laptop and two desktop computers were stolen during a break-in. Devices were password-protected but not encrypted. Exposed data included names, SSNs, addresses, phone numbers, dates of birth, insurance information, treatment notes, height, weight, and range of motion data. OCR found the initial media notice non-compliant; CE issued a corrected notice. Post-breach safeguards included encryption, new passwords, and physical security upgrades.
Affected (this filing): 6,000
HHS notified