NJHHS OCRFirst filing
Filed Aug 8, 2011bd_725d4bf3c209f7e8
MedAssets (NJ), a business associate of Clara Maass Medical Center, reported to HHS on 2011-08-08 a theft of an unencrypted hard drive affecting 8,795 individuals. The stolen device, classified as Other/Other Portable Electronic Device, contained ePHI including names, dates of birth, SSNs, account numbers, medical record numbers, charges, payment info, admission/discharge dates, and health insurance information. OCR investigated; remediation included employee retraining, destruction of unencrypted drives, encryption of all external media, and deployment of data-loss-prevention software.
Affected (this filing): 8,795
HHS notified