HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 26, 2018.
- Organization as reported
- Raley's/Bel Air Mart/Nob Hill General Store, Inc., CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Oct. 26, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13646, row:4785)
- Archived copy
- Held in the private archive (provenance)
On September 24, 2018, a pharmacy laptop computer containing unencrypted electronic protected health information (ePHI) was stolen from a workforce member’s locked car, affecting 10,124 individuals. The laptop contained both demographic and clinical ePHI, including names, dates of birth, diagnoses and prescription information. The covered entity (CE) provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE reset the workforce member’s password and disabled the stolen computer’s account. In response to OCR’s investigation, the CE conducted an updated risk analysis and risk management plan, implemented strengthened password formats, encrypted laptops, and revised policies.