Complete Wellness reported to HHS on 2017-01-06 a Loss affecting 600 individuals. An employee lost a mobile computer drive, exposing protected health information including names, addresses, dates of birth, Social Security numbers, and clinical information. The breached information was located on an Other Portable Electronic Device. Following the breach, the company sanctioned the employee, retrained staff, and implemented additional security safeguards. An OCR investigation resulted in the company completing a risk analysis and developing a risk management plan.
Affected (this filing): 600