The covered entity (CE), The Brooklyn Hospital Center, reported that a USB drive that contained the electronic protected health information (ePHI) of 2,172 individuals, was stolen from a physician’s office. The ePHI involved included names, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. Following the discovery of the incident, the CE sanctioned the responsible physician and implemented additional administrative, physical, and technical safeguards to better protect its ePHI. All workforce members were retrained on the importance of safeguarding sensitive data.
