HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 26, 2016.
- Organization as reported
- Freeport Memorial Hospital, IL
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other
- Submission date
- Feb. 26, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14605, row:5744)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Freeport Memorial Hospital, reported the theft of a computer hard drive from the private office of an employee and that the device was later located at a secure non-public area of the hospital. The CE provided breach notification to HHS, the media, and the affected individuals, including the offer of free credit monitoring to the affected individuals. The CE also filed a police report regarding the incident. The number of individuals affected by the breach was 1,349. The protected health information included patients’ diagnosis/conditions, medications and other treatment information (PHI). Following the incident, the CE required users of the affected computer to change individual passwords, reviewed its safeguards, and conducted an audit, which determined that the PHI was not accessed. The CE also implemented an alert system for the records of the individuals affected by the breach, implementing additional safeguards for those records. In response to the breach, the CE also expanded its encryption program to include all electronic devices. OCR obtained verification from the CE that a complete review of its encryption process, and its information security system policies was undertaken. b