Serendipity Hearing

The covered entity (CE), Serendipity Hearing, reported that multiple computers and hard drives that contained the electronic protected health information (ePHI) of 3,100 individuals, were stolen from its office during a burglary. The ePHI involved included names, addresses, dates of birth, health insurance information, and lab results. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE also provided complimentary credit monitoring services and a phone number for questions or concerns. In response to the breach, the CE implemented additional physical and technical safeguards to better protected its ePHI. OCR provided technical assistance to the CE.