inSite Digestive Health Care

On January 23, 2018, the covered entity (CE), InSite Digestive Health, discovered that an unknown individual had broken into two on-site storage lockers used to store protected health information (PHI). The CE's investigation determined that the breach affected 1,424 patients' records and included patients’ demographic and clinical information. In response to the breach, the CE enhanced the security of its storage locker. In response to OCR’s investigation, the CE notified affected individuals and prominent media outlets, and began converting its paper medical records to a digital format.