John E. Gonzalez DDS

On July 25, 2016, Dr. John E Gonzalez’s car window was broken and his briefcase was stolen from his car. The briefcase contained an external hard drive with electronic protected health information (ePHI). Approximately 1,025 individuals were affected by the breach. The ePHI on the external hard drive contained social security numbers, phone numbers, dates of birth, physical and email addresses, health insurance information, and pictures of patients’ teeth with the patient’s first and last names listed. The CE provided breach notifications to HHS, affected individuals, and the media, as well as substitute notice. In response to the breach, the CE added safeguards to prevent unauthorized access to the data on its external hard drive and purchased an encrypted external hard drive. OCR provided the CE with technical assistance regarding breach notification and the Security Rule risk analysis and risk management provisions.