Prisma - Midlands

Prisma-Midlands, the covered entity (CE), reported that an employee’s car was burglarized and a binder containing the protected health information (PHI) of 2,770 individuals was stolen. The PHI involved included names, dates of birth, diagnoses/conditions, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. The CE implemented additional administrative safeguards and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.