Resource Anesthesiology Association of California, a Medical

The covered entity (CE), Resource Anesthesiology Association of California, reported that an employee’s laptop was stolen from a vehicle. The laptop contained the protected health information (PHI) of 2,700 individuals. The PHI involved included names, addresses, dates of birth, diagnoses, and health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Complimentary credit and identity theft monitoring services were provided to affected individuals. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards, and retrained its workforce members. OCR provided technical assistance to the CE.