Monocacy Valley Dental

Monocacy Valley Dental, the covered entity (CE) reported that a former employe stole a laptop that contained the protected health information (PHI) of 4,000 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, financial information, medications, lab results, and diagnoses. The CE notified HHS and the impacted individuals. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. The business associate (BA), Prime Therapeutics, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 6,050 individuals. The PHI involved included names, addresses, dates of birth, member identification numbers, and medications. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.