Simmons Family Chiropractic

The covered entity (CE), Simmons Family Chiropractic, reported that its office was burglarized and a laptop and flash drive containing the electronic protected health information (ePHI) of 2,000 individuals was stolen. The ePHI involved included names, birthdates, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE enhanced its physical security measures and implemented additional technical safeguards to better protect its sensitive data. During its investigation, OCR provided technical assistance regarding the HIPAA Privacy Rule.