RMA Medical Centers of Florida reported to HHS on 2016-04-07 a laptop theft affecting 3,906 individuals. On February 6, 2016, a password-protected but unencrypted company laptop was stolen from an employee's hotel room. The device contained PHI including patients' names, dates of birth, health plan ID numbers, diagnoses, and primary care physicians' names. The CE notified HHS, affected individuals, and the media, offered one-year identity theft protection, encrypted all PHI laptops, revised HIPAA policies, retrained staff, and sanctioned the responsible employee. OCR obtained assurances of corrective action.
Affected (this filing): 3,906