HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 28, 2013.
- Organization as reported
- Alberto Gerardo Vazquez Rivera, PR
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- June 28, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15380, row:6519)
- Archived copy
- Held in the private archive (provenance)
An encrypted laptop computer was stolen from an AFLAC associate's vehicle in Puerto Rico. The laptop contained PHI of approximately 679 individuals and contained demographic, financial and clinical information, including patient names, addresses, birthdates, social security numbers, claims information, and diagnoses. The covered entity filed a police report and provided breach notification to all affected individuals, HHS, and the media. The responsible workforce member was sanctioned. OCR acknowledges that the incident does not constitute a reportable breach under the Breach Notification Rule because the laptop was sufficiently encrypted.