HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Dec. 23, 2011.
- Organization as reported
- Soundpath Health, Inc, WA
- Entity type as reported
- Health Plan
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Dec. 23, 2011
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 15719, row:6858)
- Archived copy
- Held in the private archive (provenance)
A laptop containing the protected health information (PHI) of approximately 7,581 clients was stolen out a workforce member's vehicle and subsequently used to access the covered entity's (CE) company server. The laptop contained clients' demographic information. After the incident, the CE performed a risk analysis of the specific breach occurrence. The CE provided OCR with a copy of its risk analysis, as well as its privacy, breach notification, and security policies and procedures. Following OCR's investigation, the CE performed a broader security risk assessment and encrypted all mobile media. The CE also developed and provided computer security training to its staff members.