HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 23, 2014.
- Organization as reported
- Colorado Neurodiagnostics, PLLC, CO
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- June 23, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15057, row:6196)
- Archived copy
- Held in the private archive (provenance)
An unencrypted laptop computer containing protected health information (PHI) was stolen from Colorado Neurodiagnostics’ locked offices on April 25, 2014, affecting approximately 750 individuals. The PHI on the laptop included patients’ names, dates of birth, diagnoses, conditions, laboratory results, medications, and treatment information. The covered entity (CE) provided breach notification to affected individuals, the media, and HHS. It also immediately filed a police report and implemented additional physical safeguards. As a result of OCR’s investigation and technical assistance, the CE conducted a risk analysis, developed a risk management plan, encrypted its electronic devices containing PHI, and implemented additional technical safeguards.