Unencrypted laptop cause of Calif. breach

The Santa Clara Valley Medical Center has notified patients of a breach to their protected health information (PHI).

An unencrypted laptop stolen from the audiology department of the California facility was at the heart of the breach. Patient information disclosed included patient name, medical record number, date of birth, age, gender, date of service and brainwaves from testing. The breach was discovered on Sept. 16, one or two days after the theft.

The center wrote that it is investigating the incident and that it has notified law enforcement. As remedial action, the compliance and security officer will speak to the department heads to ensure proper policies and procedures are being followed, provide training for the department, and educate any employee who has breached a patient’s PHI, according to a letter sent to patients.