vz-risk / VCDB

VERIS Community Database
Other
569 stars 182 forks source link

Patient Information Stored on Stolen TimeDoc Laptop #20757

Open swidup opened 1 month ago

swidup commented 1 month ago

https://www.hipaajournal.com/patient-data-exposed-in-laptop-theft-incidents/

"TimeDoc, a virtual care management service provider, has recently notified 1,880 patients about the theft of a laptop computer containing their protected health information. On March 13, 2024, a laptop computer was stolen from a TimeDoc employee who was traveling on public transport. The laptop was password-protected, but not encrypted.

The employee’s password has been changed to reduce the risk of unauthorized data access and the theft has been reported to law enforcement. A review was conducted which revealed patient data such as names, dates of birth, chronic conditions, and the name of the practice where the patient received treatment may have been downloaded to the laptop. The affected medical practices were notified about the data exposure between April 5 and 8, 2024, and individual notifications have been mailed to the affected patients. Steps have since been taken to improve laptop security to prevent similar incidents in the future."