HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Jan. 7, 2015.
- Organization as reported
- Aspire Indiana, Inc., IN
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Jan. 7, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14904, row:6043)
- Archived copy
- Held in the private archive (provenance)
Aspire Indiana, Inc. (AII), the covered entity, reported that a break in at its administrative offices resulted in the theft of several laptops which were designated for office use only. The laptops contained protected health information (PHI) of approximately 43890 individuals. The PHI included clients’ names, addresses, SSN, and medical record numbers. The covered entity mitigated the breach by adopting encryption technologies, changed and strengthened its passwords requirements, trained and retrained its workforce, implemented its periodic technical and nontechnical evaluations, improved physical security, provided those affected with free credit monitoring, and sent out media notifications in which it notified those affected by the breach. During the investigation, OCR obtained documentation that the covered entity implemented the corrective actions listed above.