A laptop containing ePHI of 19,898 individuals was stolen from the vehicle of an employee of Equalize Revenue Cycle Management (ERCM), a business associate of covered entity Northstar Healthcare Acquisitions, LLC. The ePHI included insurance, treatment, and demographic information. ERCM notified law enforcement, the affected individuals, the media, and provided substitute notice via its website, and offered one year of free credit monitoring. Remediation included adopting encryption, revising policies, conducting an updated risk analysis, sanctioning workforce members, and retraining employees. OCR verified corrective actions and the existence of a proper BA agreement.
Affected (this filing): 19,898