MNHHS OCRFirst filing
Filed Sep 27, 2011bd_f84bf96ec2ae4770
North Memorial Health Care (MN) reported a Theft breach to HHS OCR on 2011-09-27 affecting 9,497 individuals. An unencrypted, password-protected laptop was stolen from a business associate (Accretive Health, Inc.) workforce member's locked vehicle, exposing patient ePHI. OCR found North Memorial lacked a required BA agreement and failed to complete an enterprise-wide risk analysis. North Memorial agreed to pay $1,550,000 and implement a corrective action plan. Breached information located on Laptop.
Affected (this filing): 9,497
HHS notified