Sentara Healthcare (VA) reported to HHS OCR on 2015-10-02 a theft affecting 1,040 individuals. On or about August 14, 2015, two external computer hard drives were stolen from the covered entity's electrophysiology labs. The PHI included patients' names, dates of birth, unique identification numbers, and treatment information. Breached information was located on Other Portable Electronic Device. The CE improved physical access controls, eliminated the need for external hard drives, and notified HHS, affected individuals, and the media. OCR reviewed the risk assessment and confirmed corrective actions.
Affected (this filing): 1,040