PAHHS OCRFirst filing
Filed Nov 1, 2013bd_7209df34c26b9a69
Genesis Rehabilitation Services (PA) reported to HHS on 2013-11-01 a Loss/Theft incident affecting 1,167 individuals. Two unencrypted flash drives were stolen from a staff member's office. Breached ePHI included names, dates of birth, treatment and diagnosis information, medical insurance ID numbers, and in some instances, social security numbers. The CE notified HHS, affected individuals, and the media, provided free credit monitoring, retrained staff on encryption policies, and revised its HIPAA policies following OCR investigation.
Affected (this filing): 1,167
HHS notified