Palomar Health (CA) reported to HHS on 2014-03-28 a Theft affecting 5,499 individuals. A workforce member's car was broken into, resulting in the theft of two unencrypted flash drives containing PHI, including names, dates of birth, diagnoses/treatment information, insurance information, and some Medicare numbers. The CE notified HHS, affected individuals, and media; provided credit monitoring; sanctioned and retrained the involved workforce member; and implemented a USB encryption lockdown project. OCR's investigation resulted in improved HIPAA practices.
Affected (this filing): 5,499