Foundations Recovery Network (TN, Healthcare Provider) reported to HHS on 2013-08-15 an Unauthorized Access/Disclosure breach affecting 5,690 individuals. A password-protected but unencrypted laptop was stolen from an employee's car. PHI exposed included names, dates of birth, addresses, phone numbers, SSNs, diagnoses, level of care, dates of service, and health insurance identifiers. Two of three suspects were arrested. OCR obtained assurances that corrective actions — including a no-unencrypted-laptop policy, risk assessment, and compliance structure — were implemented.
Affected (this filing): 5,690