HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 15, 2016.
- Organization as reported
- California Correctional Health Care Services, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- May 15, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14528, row:5667)
- Archived copy
- Held in the private archive (provenance)
The covered entity, California Correctional Health Care Services, reported that a password protected, but unencrypted laptop computer, was stolen from a workforce member’s car. The CE reported that the electronic protected health information (ePHI) consisted of custody and care information of 400,000 patients. The ePHI may have included confidential medical, mental health and custodial information. The CE issued breach notification letters to affected parties, the media, as well as OCR. As a result of the investigation, the CE implemented periodic technical and non-technical evaluations, revised policies and procedures, sanctioned the workforce member, and retrained its workforce. The CE also encrypted its laptop computers.