H. Lee Moffitt Cancer Center & Research Institute

The covered entity (CE), H. Lee Moffitt Cancer Center & Research Institute, reported that a briefcase that contained electronic storage devices as well as documents was stolen from an employee’s vehicle. The protected health information (PHI) involved included names, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. In addition, the CE retrained its workforce members on the requirements to safeguard PHI in all forms.