LTC Dental, P.C.

LTC Dental, P.C., the covered entity (CE), reported that an employee’s laptop was stolen from her vehicle. The laptop was password protected, but not encrypted. Protected health information (PHI) involved included names, social security numbers, dates of birth, addresses, phone numbers, insurance information, treatment information, and medical history. The breach affected 1,680 individuals. The CE notified OCR, all affected individuals, and the media. It also offered all affected individuals one year of identity theft and credit monitoring services. In response to the breach, LTC Dental implemented additional security measures and ensured that all computers were encrypted. All employees were trained to comply with HIPAA privacy and security practices. OCR obtained assurances that the CE implemented the corrective actions noted above.