ALHHS OCRFirst filing
Filed Nov 24, 2015bd_2590d91f803c2789
On September 25, 2015, an employee's unencrypted, password-protected laptop was stolen from his vehicle. The device contained PHI of 985 patients including names, addresses, dates of birth, SSNs, clinical diagnoses, financial information, email addresses, physician information, health insurance, treatment, and medication information. Pathways Professional Counseling (AL) reported the breach to HHS on 2015-11-24, affecting 986 individuals. OCR obtained assurances of corrective actions including encryption, employee retraining, policy revisions, and employee sanction.
Affected (this filing): 986
HHS notified