HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 24, 2015.
- Organization as reported
- Sunquest Information Systems, AZ
- Entity type as reported
- Business Associate
- Category as reported
Theft
- Location of information as reported
- Laptop
- Submission date
- Sept. 24, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14704, row:5843)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Sunquest Information Systems, reported that on July 27, 2015, that an unencrypted laptop computer was stolen from a workforce member’s car. The CE determined that the breach affected the electronic protected health information (ePHI) associated with approximately 2,100 individuals. The types of ePHI affected by the breach included patients’ addresses, dates of birth, names, social security numbers, medical record numbers, health insurance information, billing codes, diagnosis information and lab results. The CE provided breach notification to HHS, affected individuals and the media, and offered 1 year of free credit monitoring to affected individuals. Following the breach, the CE sanctioned the responsible workforce member and provided additional training to other workforce members. As a result of OCR’s investigation, the CE implemented encryption technology and updated relevant policies and procedures.