HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 31, 2018.
- Organization as reported
- Humana Inc, KY
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Paper/Films
- Submission date
- Dec. 31, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13583, row:4722)
- Archived copy
- Held in the private archive (provenance)
On July 3, 2018, the covered entity’s (CE) sale associate experienced a theft when a briefcase was stolen from a vehicle in Nashville, TN. The briefcase contained an encrypted laptop and, in violation of the CE's policies, a printed document containing the protected health information (PHI) of 684 individuals, including demographic information. In response to the incident, the CE transmitted a “poison pill” to the laptop, automatically locking the device and the hard drive. The CE also sanctioned the involved associate with a performance improvement plan and retrained all other sales associates on HIPAA. The CE provided breach notification to HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions noted above.