HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 9, 2011.
- Organization as reported
- FOOTHILLS NEPHROLOGY, PC, SC
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other, Other Portable Electronic Device
- Submission date
- June 9, 2011
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15835, row:6974)
- Archived copy
- Held in the private archive (provenance)
A company-issued laptop computer containing the protected health information (PHI) of approximately 1,280 individuals was stolen from the vehicle of a covered entity's (CE) employee. The PHI included demographic and clinical information. The CE provided breach notification to the affected individuals, HHS, and the media and created a toll-free number for information regarding the incident. As a result of this incident, the CE contacted law enforcement, retrained staff on the use of portable media, and initiated a risk analysis. Following the OCR investigation, the CE reviewed and updated its policies and procedures to ensure adequate safeguards, instituted a new electronic medical records system which encrypts medical information, updated password requirements for computers, and retrained employees.