California College of Arts

The California College of Arts, the covered entity (CE), reported that on January 19, 2018, a laptop computer containing electronic protected health information (ePHI) was stolen from a workforce member’s vehicle. The ePHI of 623 individuals was stored on the laptop at the time of the theft. The ePHI included identification numbers and insurance enrollment information. The CE provided breach notification to HHS, affected individuals, and the media. In response to the breach incident, the CE encrypted all laptop computers, updated relevant policies and procedures, implemented additional safeguards, and provided additional privacy and security reminders to all workforce members. OCR obtained assurances that the CE implemented the noted corrective actions.