Children's Eyewear Sight

OCR investigated the covered entity (CE), Children’s Eyewear Sight (CES), after its business associate (BA), Inland Empire Health Plan, reported a breach affecting 1,030 individuals. The breach occurred when a computer was lost or stolen on or around October 28, 2014. During the investigation, OCR uncovered that the breach actually affected 1,750 CES clients’ electronic protected health information (ePHI). The ePHI involved included names, dates of birth, gender, addresses, phone numbers, email addresses, insurance identification numbers, and treatment information. The CE reported the incident to local law enforcement and all affected individuals. As a result of the breach, CES increased the physical security measures of its electronic systems and implemented encryption technology of its computer systems. The CE also adopted HIPAA policies and procedures, and re-trained its staff. The CE provided documentation of these corrective steps to OCR.