Health Dimensions

On November 2, 2013, the covered entity (CE), Health Dimensions, was burglarized and a computer server containing the protected health information (PHI) of 5,370 individuals was stolen. The server contained faxed copies of patients’ prescription orders. The CE provided breach notification to HHS, affected individuals, and the media. To prevent similar breaches from happening in the future, the CE repaired damage to its building, and trained staff on its HIPAA policies and procedures. OCR obtained documentation that the CE implemented the corrective actions listed above.