In January 2014, Ladies First Choice, Inc. (FL) discovered that a former employee took and misappropriated a confidential computer program containing ePHI of 2,365 individuals. The data included names, dates of birth, Social Security numbers, addresses, and identifying codes, stored on a laptop/computer program. The CE notified HHS, affected individuals, and the media. Corrective actions included staff retraining, policy review, new risk analysis, encryption, secure backup, and a civil action against the former employee. OCR obtained assurances of corrective action. Reported to HHS on 2014-04-23.
Affected (this filing): 2,365