Oregon's Health CO-OP

Oregon's Health CO-OP reported to HHS OCR on 2015-06-01 a Theft affecting approximately 14,000 individuals. An employee's unencrypted personal laptop was stolen from an unattended, locked car. The breached ePHI included names, addresses, Social Security numbers, dates of birth, health plan identification numbers, and health plan numbers. The covered entity sanctioned the employee, implemented technical safeguards against ePHI downloads to personal devices, and trained staff. OCR provided technical assistance on risk analysis and risk management.

Affected (this filing): 14,000