FLHHS OCRFirst filing
Filed Jan 15, 2015bd_6f918d9417baec9d
National Pain Institute (FL) reported to HHS on 2015-01-15 an Improper Disposal breach affecting 500 individuals. From July 13 to August 13, 2013, the covered entity distributed outdated desktop computers and laptops to employees for personal use without first deleting ePHI. The computers contained names, addresses, dates of birth, diagnoses, and other treatment information. The CE repossessed computers, obtained written acknowledgements from employees, and implemented corrective actions including encrypting all computers and updating HIPAA policies. OCR obtained assurances of remediation.
Affected (this filing): 500
HHS notified