CHRISTUS Spohn Hospital Corpus Christi-Shoreline

The covered entity (CE), CHRISTUS Spohn Hospital, discovered that documents, containing patients’ protected health information (PHI), were stolen from one of its resident physician’s vehicles at the resident’s home on April 16, 2018. The PHI potentially affected included the names, dates of birth, dates of service, genders, ages, diagnoses, medical record numbers, and account numbers of approximately 1,805 individuals. As a result of the breach, the CE improved safeguards, updated its policies and procedures, and trained its workforce members on better practices to protect PHI. Further, the CE provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions listed.