HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 10, 2013.
- Organization as reported
- Northside Hospital, Inc., GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Loss
- Location of information as reported
- Laptop
- Submission date
- Dec. 10, 2013
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15240, row:6379)
- Archived copy
- Held in the private archive (provenance)
A password-protected, unencrypted laptop was lost or stolen when a Northside Hospital (NSH) workforce member inadvertently left it on the hood of her car while parked. The laptop contained the electronic protected health information (ePHI) of 4,879 individuals. The ePHI involved in the breach included patients’ names, account numbers, billing dates, diagnoses and/or diagnosis codes, and lab results. The covered entity (CE), NSH, provided breach notification to HHS, affected individuals, and the media and provided substitute notification. Following the breach, the CE encrypted all its ePHI. As a result of OCR’s investigation, the CE also revised its HIPAA policies reguarding mobile devices and breach notification, and implemented other safeguards.