Renew Wellness Center, PLLC

Renew Wellness Center, PLLC, the covered entity (CE), reported that two unencrypted cell telephones containing the electronic protected health information (ePHI) of 727 individuals, were stolen from its office. The ePHI involved included names, addresses, telephone numbers, email addresses, Social Security numbers, financial information, claims data, and treatment information. The CE notified HHS, affected individuals, the media, local law enforcement, and provided complimentary credit monitoring services to affected individuals. In its mitigation efforts, the CE implemented additional administrative, physical, and technical safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding the HIPAA Security Rule.