LKM ENTERPRISES

Two computers (a desktop and a laptop) containing billing software were stolen from the covered entity (CE), LKM Enterprises, Inc. The protected health information (PHI) involved in the breach included the demographic information, financial information, and clinical information of approximately 3,400 individuals. Upon discovering the breach, the CE filed a police report. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE improved physical security both inside and outside of the facility premises. OCR obtained assurances that the CE implemented the corrective actions listed.