The covered entity (CE), The Affiliated Sante Group, reported that an employee’s laptop was stolen affecting the electronic protected health information (ePHI) of 679 individuals. The ePHI involved included names, member ID numbers, dates of birth, Social Security numbers, and clinical information. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE implemented additional administrative and technical safeguards of retrained its staff on the requirements of protecting patient privacy.
