On July 28, 2011, the covered entity (CE) reported paper documents containing protected health information (PHI) were stolen from an employee's locked car that was parked in front of the employee’s home. The documents included the names, member identification numbers, birthdates, group numbers, group names, and diagnostic information for about 511 individuals, 498 of them residing in Texas, and 13 in New Mexico. Following the breach, the CE counseled the employee who was responsible for the breach, revised its policies and procedures on safeguards, and sent out an email to all staff, reminding them of the importance of safeguarding PHI in their possession at all times. OCR obtained documentation evidencing that the CE implemented the corrective actions listed.
