Paul C. Gering, Jr., M.D

Burglars broke into the office of Paul C. Gering, Jr., M.D., the covered entity (CE), and stole a desktop computer server on June 2, 2017. The breach affected approximately 2,000 individuals, and involved protected health information (PHI), including patients’ addresses, dates of birth, driver’s licenses, names, social security numbers, clinical diagnoses/conditions, lab results, medications, and other treatment information. Upon discovering the breach, the CE notified law enforcement and improved physical safeguards. The CE provided timely notification to HHS, affected individuals, and the media. As a result of the investigation, the CE improved physical safeguards by moving the server into the basement and installing security cameras. OCR obtained assurances that the CE implemented the corrective actions listed.