Crawford Wellness Center

Crawford Wellness Center, Inc., the covered entity (CE), reported a breach in which its office was burglarized. The intruder(s) broke into locked cabinets that contained medical records. The breach affected 1,500 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, drivers’ license numbers, social security numbers, diagnoses, lab results, medications prescribed, treatment information, and financial data. The CE notified all affected individuals as well as the media. Crawford implemented additional security controls to enhance its administrative, physical, and technical safeguards of PHI.