The covered entity (CE), INTEGRIS Health, reported that two portable hard drives containing the electronic protected health information (ePHI) of 1,245,218 individuals, were missing. The ePHI involved included names, diagnoses, and clinical and treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI. The responsible workforce member was also sanctioned.
