California Correctional Health Care Services

California Correctional Health Care Services (CCHCS) reported the theft of an unencrypted, password-protected laptop from an employee's vehicle on February 25, 2016. The incident was identified on April 25, 2016. The laptop may have contained confidential medical, mental health, and custodial information related to individuals' custody and care between 1996 and 2014. CCHCS provided security training and reinforced practices.

California Correctional Health Care Services reported to HHS OCR on 2016-05-15 a Theft affecting 400,000 individuals. A password-protected but unencrypted laptop was stolen from a workforce member's car. Breached ePHI included confidential medical, mental health, and custodial information. The CE notified affected parties, media, and OCR. Remediation included encryption of laptops, revised policies, workforce retraining, and sanctioning of the responsible workforce member.

Affected (this filing): 400,000