An employee's laptop containing PHI (demographic and clinical information) of approximately 3,260 individuals (HHS breach report lists 3,119 affected) was stolen from a locked vehicle between Aug 19-20, 2016. MGA Home Healthcare Colorado reported to law enforcement and HHS, notified individuals and media, offered free credit monitoring, and implemented remediation including laptop encryption, stronger passwords, improved physical security, updated risk analysis/management plans, workforce sanctions (including termination), and retraining. OCR reviewed the corrective actions.
Affected (this filing): 3,119