GULFPORT ANESTHESIA SERVICES

The covered entity (CE), Gulfport Anesthesia Services, PA, reported that the Biloxi Police Department notified them that an individual had broken into its storage facility that contained the medical records of 20,000 individuals. The protected health information (PHI) involved included names, dates of birth, Social Security numbers, clinical information, and financial data. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its PHI. It also destroyed all paper medical records and has converted to electronic medical records. OCR obtained assurances that the CE implemented the corrective actions noted.