Las Colinas Orthopedic Surgery & Sports Medicine

On November 20, 2018, the covered entity’s (CE) business associate (BA), Zthernet, discovered that a workforce member’s unencrypted data drive was stolen from the workforce member’s vehicle. The stolen drive contained the electronic protected health information (ePHI) of 76,000 individuals, including patients’ names and dates of birth. The CE provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions listed above.