City of Detroit (MI) reported to HHS OCR on 2018-02-05 a Loss affecting 544 individuals. An unencrypted flash drive containing PHI was reported missing; it was subsequently located by an employee and returned to their supervisor. PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses/conditions, lab results, medications, and other treatment information. Breached information was located on an Other Portable Electronic Device. The incident was also reported to the NJ State Police Cyber Crimes Unit. The CE implemented encryption for mobile storage, revised access policies, and retrained staff.
Affected (this filing): 544