Brodhead Dental Center

A dentist with the covered entity (CE), Brodhead Dental Center, encountered a suspicious pop-up window on his work computer while he was online making a personal transaction. There is no indication that any patients’ protected health information (PHI) was accessed as a result of this incident. Following this incident, the CE adopted encryption technology, improved password security, updated its security plan, and implemented technical safeguards. It also sanctioning the involved workforce member and improved its policies and procedures. OCR obtained assurances that the CE implemented the corrective actions noted above.