US Texas Health and Human Services Commission Sep 2011 Physical Action (Q16277)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Texas Health and Human Services Commission Sep 2011 Physical Action |
A data breach risk event |
Statements
DE7C843B-1180-4DEB-A419-5245230D9EC3
September 2011
0 references
An unencrypted laptop was stolen from an employees vehicle. The laptop contained the ePHI of 1,696 patients. The information at issue included patient names, dates of birth, gender, Medicaid identification numbers, procedure codes and diagnosis. Following discovery of the breach, the CE notified affected patients and notified the media. Following the breach, the CE confirmed encryption of laptops per CEs policy and sanctioned three involved employees. (English)
