WASHINGTONHHS OCRFirst filing
Filed Jan 27, 2012bd_c8776b1ebe6ab715
On 12/30/2011, three password-protected desktop computers were stolen from Flex Physical Therapy (WA) in a break-in. The ePHI potentially exposed included names, Social Security numbers, addresses, dates of birth, claims information, and diagnosis/treatment information of 3,100 individuals. The covered entity notified HHS, affected individuals, and the media, and provided substitute notice. Post-breach, the CE upgraded software and improved facility access controls. OCR provided technical assistance on encryption standards and breach notification.
Affected (this filing): 3,100
HHS notified