HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 17, 2012.
- Organization as reported
- Blount Memorial Hospital, Inc, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Oct. 17, 2012
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15559, row:6698)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Blount Memorial Hospital, reported that a laptop computer containing the electronic protected health information (ePHI) of 27,799 individuals was stolen from a workforce member's home. The ePHI involved in the breach included demographic and other financial information. The CE provided breach notification to affected individuals, HHS, and the media. Following the breach, the CE reviewed its privacy and security policies and procedures, encrypted all of its laptops, and improved its HIPAA training. As a result of OCR's investigation, OCR provided technical assistance regarding the CE's security incident procedures and risk management plan. OCR also reviewed the CE's HIPAA policies and procedures that were created or revised in response to the breach. \ \ \