Wonderland Child and Family Services

The covered entity (CE), Wonderland Child & Family Services, reported that a former employee downloaded patient records containing the protected health information (PHI) 1,283 individuals to a personal laptop computer without approval or authorization. The PHI involved included clinical and demographic information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE is enhancing its access controls and retraining its relevant workforce. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.