Riverside County Regional Medical Center

Riverside County Regional Medical Center (RCRMC), the covered entity (CE), reported that a laptop was lost or stolen at its facility on or around December 1, 2014. The breach affected 7,925 individuals. The types of electronic protected health information (ePHI) involved included names, social security numbers, and clinical information. The CE reported the incident to local law enforcement and notified all affected individuals and the media. As a result of this incident, the CE encrypted all laptops and reconfigured web-cache settings. In response to OCR’s guidance, RCRMC took additional steps to address gaps in its security management program to further safeguard ePHI and provided documentation of these corrective steps to OCR.