On January 31, 2011, an employee of Henry Ford Health System lost a personal portable electronic device (a flash drive) containing the clinical and demographic protected health information (PHI) of 2,777 individuals. The health system reported the breach to HHS on February 23, 2011. In response, the entity sanctioned the employee, implemented an encryption program for flash drives, and provided assurances to the Office for Civil Rights (OCR) for further corrective actions, including enhancing their asset management program.
Affected (this filing): 2,777