The covered entity (CE), Andor Labs, reported that an employee’s vehicle was stolen which contained a laptop that housed the protected health information (PHI) of 500 individuals. personal vehicle was stolen, and that the car contained a work laptop she used to access protected health information (PHI) for approximately 500 patients. The PHI involved included names, birthdates, addresses, Social Security numbers, diagnoses, medications, and lab results. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE implemented additional technical safeguards to better protect sensitive data.
