Implant and Prosthodontic Associates

The covered entity (CE), Implant and Prosthodontic Associates, reported that an external hard drive that contained the protected health information of 6,134 individuals was stolen. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the employee responsible and implemented additional administrative, technical, security, and physical safeguards to better protect its sensitive data. Staff were retrained.