SSM Health Care of Wisconsin DBA: St. Mary���s Janesville Hospital

A laptop computer containing protected health information (PHI) was stolen from the vehicle of a covered entity's (CE) workforce member. Approximately 633 individuals were affected by the breach. The PHI included patients' names, dates of birth, medical records, and account numbers. The CE immediately reported the laptop theft to the police. In response to the breach, the CE provided notice to HHS, the affected individuals, and the media. In addition, the CE encrypted all company laptops, re-trained each provider and employee in possession of a company laptop, and applied disciplinary policies to the employees involved in the incident. OCR obtained assurances that the covered entity implemented the corrective action listed above. \ \