Lakeview Medical Center

The covered entity (CE), Lakeview Medical Center, reported that a laptop was stolen from an employee’s vehicle. The laptop contained the protected health information (PHI) of approximately 698 individuals. The PHI involved included names, dates of birth, Social Security numbers, addresses, treatment information, and medications prescribed. The CE notified HHS, affected individuals, the media, and offered complimentary credit monitoring services. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data. The employee responsible was sanctioned. OCR obtained assurances that the CE implemented the corrective actions noted.