HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 3, 2014.
- Organization as reported
- Mount Sinai Beth Israel, NY
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Oct. 3, 2014
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14969, row:6108)
- Archived copy
- Held in the private archive (provenance)
Mount Sinai Beth Israel, the covered entity (the CE), reported the theft of an unencrypted laptop computer containing the protected health information (PHI) of 10,793 patients from the Department of Obstetrics/Gynecology on-call room. The PHI consisted of demographic and clinical information. The CE provided breach notification to HHS, the media, and the affected individuals. Following the breach, the CE reported the theft to law enforcement, remotely changed the password on the stolen laptop, enhanced physical safeguards and retrained staff on privacy and security issues related to data security and encryption. During the investigation, OCR obtained assurances that the CE implemented the corrective actions. As a result of the investigation, the CE is expected to implement a corresponding risk management and remediation plan as identified in its risk analysis. The CE is expected to implement a comprehensive policy and procedure for personally owned devices that have access to the CE’s electronic PHI to ensure that they are encrypted, tracked and monitored for encryption.