Lane Community College Health Clinic

On March 25, 2017, the covered entity (CE) reported that on February 2, 2017, a laptop computer was found to be infected with a virus known to transmit information to a third party on the internet. The breach potentially affected approximately 2,516 individuals and the types of protected health information (PHI) involved in the breach included patients’ names, addresses, dates of birth, social security numbers and clinical information. The CE provided breach notification to HHS, affected individuals, and the media, as well as posting notification on its website and providing free credit monitoring upon request. The CE revised its policies and procedures specific to the allegations of the breach. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.