Hankyu Chung, M.D.

Hankyu Chung, M.D. notified patients of a privacy breach resulting from a burglary at its San Jose office on June 16, 2013. Two laptops were stolen; one contained unencrypted patient names, dates of birth, and significant medical records including diagnoses and medication information. Social Security numbers and addresses were not present. The incident was reported to the San Jose Police Department. The organization increased security and implemented new procedures to prevent future breaches.

On June 17, 2013, two unencrypted laptops were stolen from Hankyu Chung, M.D.'s facility in San Jose, CA. One laptop contained ePHI of ~2,182 individuals, including names, addresses, phone numbers, dates of birth, and medical records. The CE notified HHS, affected individuals, and the media; established a notification website; and implemented physical security improvements. OCR identified corrective actions including enterprise-wide risk analysis and BAA maintenance. Note: entity name retained because the covered entity is a sole-practitioner medical practice operating under the physician's own name (not a natural-person breach victim).