HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of May 14, 2012.
- Organization as reported
- Family Health Services Minnesota PA, MN
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- May 14, 2012
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15632, row:6771)
- Archived copy
- Held in the private archive (provenance)
On March 20, 2012, one of the covered entity's (CE) clinic locations in St. Paul, Minnesota, was burglarized and two tablet computers containing electronic protected health information (ePHI) were stolen. The computers contained demographic information for approximately 4,000 individuals. Upon discovering the breach, the CE, Family Health Services' of Minnesota, P.A., reported the breach incident to the Saint Paul Police Department. The CE also provided breach notification to the individuals affected by the breach, HHS, and the media. To prevent similar breaches from happening in the future, the CE improved safeguards for storage of its laptop computers and encrypted its computer hard drives. The CE also conducted a security risk analysis, prepared an incident report, and updated its policy and procedure regarding the safeguarding of PHI, and trained its workforce on its updated policies and procedures. OCR obtained documented assurances that the CE implemented the corrective actions noted above.