Georgia Health Sciences University

Georgia Health Sciences University reported to HHS on 2012-03-15 a Theft affecting 513 individuals. On January 19, 2012, an employee discovered her laptop was stolen from the front porch of her home. The laptop contained ePHI of 513 patients including names, dates of birth, and health data. The laptop was password-protected but not encrypted. In response, the CE encrypted all employee laptops, implemented mobile device and remote access policies, updated data backup policies, and trained staff on HIPAA policies. OCR obtained assurances that corrective actions were implemented.

Affected (this filing): 513