An unencrypted laptop was stolen from an employee offsite. The laptop contained the PHI of 4,486 patients, including names, addresses, and procedure codes. The covered entity filed a police report, notified affected patients and the media, encrypted all existing laptops, and implemented a policy requiring future laptops to be encrypted before issuance.
Affected (this filing): 4,486