CHI Franciscan Health Hospice-Tacoma

CHI Franciscan Health Hospice, the covered entity (CE), reported that a backpack containing a laptop and paper copies of medical records was stolen from an employee’s vehicle. The breach affected 2,413 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, social security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The covered entity implemented physical and technical security safeguards, updated its risk analysis, sanctioned the workforce member, and re-trained all staff members. OCR provided technical assistance to the covered entity regarding the HIPAA Security Rule.