HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of May 23, 2014.
- Organization as reported
- Humana Inc [case #15381], KY
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- May 23, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15078, row:6217)
- Archived copy
- Held in the private archive (provenance)
On April 2, 2014, an unencrypted portable media device containing electronic protected health information (ePHI) was stolen from an employee’s locked vehicle. The portable media device contained the demographic data (including some social security numbers), clinical, and health insurance information of 2,962 individuals. The CE provided breach notification to HHS, affected individuals, and the media. The offending employee was terminated as a direct result of violating the CE’s policy prohibiting the use of unencrypted devices to store and transport PHI. In addition, the CE re-educated employees about this policy and instructed management teams to ensure that proper procedures were being followed. OCR obtained assurances that the corrective actions were taken.