Peak Vista Community Health Centers

The covered entity (CE), Peak Vista Community Health Centers, reported that two desktop computers that contained the electronic protected health information (ePHI) of 3,118 individuals were stolen from its facility. The ePHI involved included names, dates of birth, diagnoses/conditions, and medications prescribed. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE implemented additional technical, administrative, and physical safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding its HIPAA Security Rule obligations.