QUALITY-CARE PHARMACY

On April 2, 2018, the covered entity (CE), Quality Care Pharmacy in San Marcos, California, reported that its site was burglarized and that medications, an external hard drive, and paper records containing protected health Information (PHI) were stolen. The stolen records contained the demographic, financial, and clinical information of over 1,000 individuals. The CE provided breach notification to HHS, affected individuals, and the media and offered identity theft protection services to all affected individuals. Following the breach, the CE contacted the San Diego County Sheriff Department, hired a digital forensics firm, revised policies and procedures, and retrained its workforce. OCR reviewed additional documentation provided by the CE and obtained documented assurances that the CE implemented the corrective actions listed above.