UHS-Pruitt Corporation (GA) reported to HHS OCR on 2013-11-15 a Theft affecting 1,300 individuals. A manager's unencrypted laptop was stolen from a hotel parking lot; the device contained PHI including names, SSNs, addresses, dates of birth, bank account numbers, Medicare numbers, possible diagnoses, and patient locations. The CE remediated by resetting credentials, encrypting devices, disabling local storage, and retraining staff. OCR consolidated the review with a related stolen-laptop case at the same entity.
Affected (this filing): 1,300