Rainbow Hospice and Palliative Care (IL) reported to HHS on 2010-05-26 a Theft affecting 1,000 individuals. An employee's laptop was stolen from her bag during a patient home-admission visit. Although the covered entity had an encryption and password-protection policy, this laptop had been reconfigured by the employee to not require a password. PHI on the device included names, addresses, dates of birth, phone numbers, Social Security numbers, Medicare numbers, electronic health records, and commercial insurance information.
Affected (this filing): 1,000