HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 30, 2015.
- Organization as reported
- Humana Inc [Case 18652], KY
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Laptop, Paper/Films
- Submission date
- Sept. 30, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14700, row:5839)
- Archived copy
- Held in the private archive (provenance)
Humana, Inc., the covered entity (CE), discovered that on August 20, 2015, a market staff employee’s briefcase containing an encrypted laptop computer and unsecured paper documents was stolen from her locked vehicle. The CE investigated and determined that the stolen documents contained the protected health information (PHI) of 2,815 individuals, including full names, dates of birth, clinic names, and health insurance information. The CE issued new health insurance member identification numbers to affected individuals, and provided timely breach notification to HHS, to affected individuals, on its website and to the media. In response to the breach, the CE retrained its workforce, disseminated guidance material specifically addressing the proper handling and safeguarding of PHI, and revised procedures to eliminate transportation of PHI in paper format. OCR obtained assurances that the CE implemented the corrective actions listed above.