Louisiana State University Health Sciences Center-New Orleans

Louisiana State University Health Sciences Center – New Orleans, the covered entity (CE), reported that an unencrypted laptop was stolen from a physician’s personal vehicle resulting in the theft of protected health information (PHI) of approximately 14,500 individuals. The types of PHI involved in the breach included clinical and demographic information. Following the breach, the CE notified HHS, affected individuals, and the media. As a result of OCR’s investigation, the CE began to identify all unencrypted electronic devices and encrypt them, and implemented a method to address data backup. OCR obtained assurances that the CE implemented the corrective actions listed above.