Napa Valley Dentistry

Napa Valley Dentistry (NVD), the covered entity (CE), discovered that an unencrypted server that contained electronic protected health information (ePHI) had been stolen from its offsite storage unit. The breach affected 4,262 individuals and the ePHI involved included names, dates of birth, social security numbers, addresses, and financial information. In response to the breach, NVD performed a risk analysis, executed a corresponding risk management plan, and implemented several updates to its policies and procedures. In response to OCR’s investigation, NVD provided additional training to the staff members pertaining to the HIPAA Privacy, Security, and Breach Notification Rules.