HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 17, 2017.
- Organization as reported
- Clinical Pathology Laboratories Southeast, FL
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Nov. 17, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13999, row:5138)
- Archived copy
- Held in the private archive (provenance)
Clinical Pathology Laboratories Southeast (CPLS), a covered entity (CE), reported that a laptop was stolen out of an employee’s car. The breach involved 19,763 individuals. The protected health information (PHI) involved included social security numbers, driver’s license numbers, financial information, medical information, and health insurance information. In response to the breach, the CE terminated the laptop’s access to its network, retrained employees, revised its security incident and mobile device policies, and adopted a number of technical safeguards including full disk encryption and remote wipe technologies. The CE provided breach notification to HHS, affected individuals, the media, and posted substitute notice on its website. OCR has obtained assurances that the CE implemented the corrective actions above.