On May 8, 2017, Bay Area Pain and Wellness Center (CA) discovered its Electromyography (EMG) machine was stolen from an employee's car. A laptop attached to the EMG contained ePHI of approximately 548 patients, including names and dates of birth. The laptop was password-protected but not encrypted. The CE notified HHS, affected individuals, and the media. Remediation included laptop encryption, policy updates, and employee retraining. OCR provided technical assistance on breach notification and Security Rule requirements.
Affected (this filing): 548