St. Peter's Health Partners

The covered entity (CE), St. Peter’s Health Partners, reported that an employee’s unencrypted cellular phone was stolen. The cellular phone contained the electronic protected health information (ePHI) of 5,117 individuals. The ePHI involved included names, dates of birth, addresses, phone numbers, and treatment information. The CE notified HHS, affected individuals, and the media. Following the breach, the CE implemented additional technical safeguards and added additional information regarding cellular phone security practices to its policies and procedures. OCR obtained assurances that the CE implemented the corrective actions noted.