HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 22, 2018.
- Organization as reported
- City of Houston Medical Plan, TX
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- March 22, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13883, row:5022)
- Archived copy
- Held in the private archive (provenance)
The City of Houston Medical Plan, the covered entity (CE), reported that a laptop containing the electronic protected health information (ePHI) of 34,637 individuals, was stolen from the car of an employee. The ePHI involved included names, dates of birth, addresses, social security numbers, lab results, medications, and diagnoses. In response to this breach incident, the CE notified OCR, affected individuals, and the media. Additionally, the CE updated its policies regarding the retention of records, sanctioned the workforce member involved, and improved technical safeguards to prevent similar incidents.