Ohio Neurologic Institute

Ohio Neurologic Institute, the covered entity (CE), reported that a password-protected desktop computer containing the protected health information (PHI) of 5,548 individuals was stolen from its clinic. The PHI involved included names, addresses, Social Security numbers, dates of birth, and health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to secure its sensitive data. Of note, the CE ceased operations and is no longer providing healthcare services.