Rothman Orthopaedic Institute

The covered entity (CE), Rothman Orthopaedic Institute, reported that a former employee retained the protected health information (PHI) of approximately 874 individuals. The PHI involved included names, addresses, dates of birth, treatment information, and financial information. The CE notified HHS, affected individuals, and the media. The CE also set up a call center for questions or concerns and provided complimentary credit monitoring services to affected individuals. In response to the breach, the CE revised it policies and procedures to better protect its PHI.