University of Miami reported to HHS on 2012-01-30 a Theft affecting 1,219 individuals. An unencrypted USB drive was stolen from a pathologist's vehicle; the drive contained ePHI including names, ages, diagnoses, and treatment information. Breached information was located on an Other Portable Electronic Device. The CE notified HHS, patients, and the media; offered credit monitoring; ceased relations with the pathologist (an independent contractor); and retrained personnel on encryption and data protection. OCR obtained assurances that all corrective actions were completed.
Affected (this filing): 1,219