Stephen Haggard, DPM Podiatry

Computer equipment and a safe containing unencrypted the electronic protected health information (ePHI) of 1,597 individuals were stolen from the covered entitiy’s (CE) office on March 4, 2012. The ePHI involved in the breach included names, addresses, dates of birth, social security numbers, claims information, diagnoses, and medication information. Following the breach, the covered entity purchased a new door and locks, a new alarm system, and alarm monitoring. As a result of OCR’s investigation, the CE conducted a risk analysis and developed breach notification policies and procedures. The CE also encrypted its computer server.