Martinsville Henry County Coalition for Health and Wellness

An employee’s unencrypted laptop was stolen from his car. The breach affected approximately 5,806 individuals. The protected health information (PHI) involved in the breach included clinical and diagnostic information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the covered entity (CE) accelerated its ongoing process of encrypting laptops and implementing its risk management plan. OCR reviewed the CE's policies and procedures to ensure compliance with the HIPAA Privacy and Security Rules.