HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 13, 2017.
- Organization as reported
- Childrens Hospital of Los Angeles, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Jan. 13, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14301, row:5440)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Children’s Hospital of Los Angeles, reported a breach of 3,594 individuals’ electronic protected health information (ePHI) resulting from theft of an unencrypted laptop stored in a workforce member’s vehicle while parked in a public parking lot. The breach affected patients' demographic information (name, date of birth, medical record number, address) and/or clinical information. Following the breach and in response to OCR’s contact in this matter, the CE took corrective actions, including blocking the laptop from accessing the CE's internal computer network, reminding staff not to store laptops or other mobile devices in vehicles, ensuring encryption on each Apple operated laptop, and implementing new policies. The CE provided breach notification to HHS, affected individuals, and the media.