Jeffrey J. Smith, Md

Jeffrey J. Smith, MD (Oklahoma) reported to HHS OCR on 2011-03-16 a Theft incident affecting 600 individuals. A skin analysis machine containing ePHI (names, dates of birth, and facial photographs) was shipped to the manufacturer via UPS for repairs; UPS damaged and discarded the device. Breached information was located on a desktop computer, other portable electronic device, and other media. Following OCR investigation, the CE revised its hardware security policy to require on-site maintenance and pre-shipment ePHI backup and erasure.

Affected (this filing): 600