The covered entity (CE), WellMed Medical Management, Inc., reported that an employee’s vehicle was burglarized and documents that contained the protected health information (PHI) of 591 individuals, were stolen. The PHI involved included names, dates of birth, medical record numbers, Social Security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE sanctioned the responsible workforce member.
