Office of Dr. David Elbaum

On November 10, 2016, the Office of Dr. David Elbaum, the covered entity (CE), discovered that paper copies of patients' protected health information (PHI) had been stolen from a third party storage facility, a business associate (BA). The exact date of the theft is not known. The breach affected approximately 500 individuals and included clinical and demographic information. The CE provided breach notification to HHS, affected individuals, and the media. It also established a toll-free call center and offered free credit monitoring services to the affected individuals. The CE obtained assurances from the BA that it implemented additional physical safeguards at the facility following the breach. OCR obtained assurances that the CE implemented the corrective actions described above.