SunBridge Healthcare Corporation

A laptop computer containing the electronic protected health information (EPHI) of 3,830 individuals was stolen out of a workforce member’s vehicle. The types of ePHI included names, birthdates, social security numbers, claims information, financial information, diagnoses/conditions, medications, lab results, and other treatment information. The covered entity (CE), SunBridge Healthcare Corporation, provided breach notification to HHS, affected individuals, and the media, and provided individuals with identity theft protection services. As a result of OCR’s investigation the CE updated its risk analysis, re-educated its workforce members on proper laptop security protocols, and installed encryption software to protect ePHI.
Location of breached information: Laptop
Business associate present: No