Quraishi, Nisar A

The covered entity (CE), Tribeca Medical Center, reported that on October 21, 2014, patients’ medical records stored in the CE’s storage shed were stolen. The breach affected potentially 20,000 patients and the protected health information (PHI) included names, addresses, zip codes, telephone numbers, dates of birth, social security numbers, health plan information, diagnoses, medical and clinical histories. The CE provided breach notification to HHS, affected individuals, and the media. As a result of OCR’s investigation, the CE has ceased storing PHI in the storage unit.