ILHHS OCRFirst filing
Filed Nov 8, 2012bd_6837bcb7aae03747
Maryville Academy (Des Plaines, IL) reported to HHS OCR on 2012-11-08 a Loss incident affecting 3,897 individuals. Three secondary back-up portable hard drives were removed from a locked secure room. The drives contained ePHI including names, dates of birth, phone numbers, SSNs, addresses, diagnoses, financial claims, medications, and lab results. The CE notified HHS, affected individuals, and media; offered one year of free credit monitoring; encrypted portable devices; adopted off-site third-party storage; revised HIPAA policies; and trained staff. OCR confirmed corrective actions.
Affected (this filing): 3,897
HHS notified