HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 21, 2016.
- Organization as reported
- Henry County Health Department, OH
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Electronic Medical Record, Email, Laptop, Paper/Films
- Submission date
- Dec. 21, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14322, row:5461)
- Archived copy
- Held in the private archive (provenance)
On October 22, 2016, the covered entity (CE), Henry County Health Department learned that a nurse’s laptop computer and some paper records were stolen from her car inside her locked garage. Approximately 575 individuals were affected by the breach of demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE reprimanded the employee involved in the breach with a record of written warning. Additionally, the CE issued a policy related to safeguarding laptops taken off premises, encrypted all laptops, workstations, and servers and updated its Privacy and Security Policies. OCR obtained documented assurances that the CE implemented the corrective action steps noted above.