WISCONSINHHS OCRFirst filing
Filed Apr 3, 2018bd_40fea44ba6b65244
On February 5, 2018, a laptop belonging to a business associate (The Management Group's IRIS Consultant) was stolen from her car. The bag also contained a notebook with the laptop's password, rendering the encryption potentially compromised. The laptop may have contained PHI for ~779 individuals enrolled in Wisconsin's IRIS program, including demographic and financial information. The BA reported theft to police, disabled network access, and sanctioned the employee. The CE notified HHS, affected individuals, and media, and offered 12 months of identity theft protection. OCR obtained documented corrective-action assurances.
Affected (this filing): 779
HHS notified