City of Houston Medical Plan

The City of Houston Medical Plan, the covered entity (CE), reported that a laptop containing the electronic protected health information (ePHI) of 34,637 individuals, was stolen from the car of an employee. The ePHI involved included names, dates of birth, addresses, social security numbers, lab results, medications, and diagnoses. In response to this breach incident, the CE notified OCR, affected individuals, and the media. Additionally, the CE updated its policies regarding the retention of records, sanctioned the workforce member involved, and improved technical safeguards to prevent similar incidents.