THE BRIGHAM AND WOMEN'S HOSPITAL, INC.

An employee of Brigham & Women’s Hospital had an encrypted laptop and cell phone stolen during an armed robbery and was forced to disclose the password and encryption keys. The devices contained the protected health information (PHI) of 999 individuals, including names, medical records numbers, age, and diagnostic information. In response to the investigation, the hospital initiated a new enterprise-wide risk analysis.

Affected (this filing): 999