HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 12, 2017.
- Organization as reported
- Indiana Health Centers, Inc., IN
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Desktop Computer, Laptop
- Submission date
- Sept. 12, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14062, row:5201)
- Archived copy
- Held in the private archive (provenance)
On August 19, 2017, a desktop computer and two laptop computers were stolen during a break-in at the covered entity's (CE) South Bend location, affecting 1,697 individuals. The protected health information (PHI) involved in the breach included clinical and demographic information. The CE provided breach notification to HHS, affected individuals, and the media. To resolve the issues raised in this matter, the CE encrypted laptop computers and hard drives and began a practice of enabling full disk encryption on all new devices before deploying them to the production network. Additionally, the CE implemented a Security Incident and Event Management System (SIEM) that monitors a large volume of electronic device logs and computer network traffic to identify and respond to potential security threats and implemented advanced physical security features at all its locations with additional plans for 2019. The CE sanctioned the case manager with a verbal warning and required her to review the Workstation Use Policy. OCR obtained documented assurances that the CE implemented these corrective action steps.