Milligan Chiropractic Group

The covered entity (CE), Milligan Chiropractic Group, Inc. d/b/a Del Mar Chiropractic Sports Group, reported that on January 31, 2018, a physician’s laptop computer was stolen. The types of protected health information (PHI) involved in the breach included the demographic and clinical information of 2,640 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE encrypted data on laptops, changed passwords, implemented new safeguards, revised policies and procedures, and trained workforce members. As a result of OCR’s investigation, the CE provided copies of its revised policies and procedures, contracted with a third party to ensure HIPAA compliance for its electronic health records, and trained employees regarding its revised policies and procedures.