Capital Prosthetic and Orthotic Center

Capital Prosthetic and Orthotic Center, Inc., the covered entity (CE), reported the theft of protected health information (PHI) from its storage company’s facility, Brandywine Lock-n-Stock. The breach affected 1,134 individuals’ PHI and included names, addresses, birthdates, phone numbers, social security numbers, medical diagnosis/treatments and insurance Information. The CE provided breach notification to HHS, affected individuals, and the media and provided free credit monitoring. Following the breach, the CE conducted an investigation, terminated the relationship with the storage company and moved all of its paper records to a new business associate (BA), with which it established a HIPAA BA agreement. OCR obtained documented assurances that the CE implemented the corrective actions noted above.