Tampa Bay Surgical Group

Tampa Bay Surgical Group, the covered entity (CE), reported that an flash drive that contained the protected health information (PHI) of 1,107 individuals was lost in transit. The PHI involved included names, addresses, phone numbers, dates of birth, Social Security numbers, and health insurance and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained to protect and secure PHI.