Patients Notified of KinetoRehab Physical Therapy Laptop Theft
New York-based KinetoRehab Physical Therapy has started sending HIPAA breach notification letters to patients alerting them to the potential exposure of some of their protected health information.
On September 16, 2016, KinetoRehab discovered a laptop computer was missing from its facilities. A review of security camera footage revealed the laptop computer had been stolen. While the laptop bag has now been found, the laptop computer had been removed and has not been recovered. The incident was reported to law enforcement and efforts are currently being made to locate the individual identified from the CCTV camera footage.
The laptop contained data on a limited number of patients, although those affected by the breach have had highly sensitive information exposed. The laptop contained patients’ names, birthdates, Social Security numbers, insurance information, and notes relating to the physical therapy provided by the clinic. Patients affected by the incident had visited KinetoRehab Physical Therapy for treatment between November 2011 and March 2013.
While the data stored on the device could potentially be accessed by unauthorized individuals, there is no indication that data have been accessed or that they will be used inappropriately. However, since highly sensitive information has been exposed, KinetoRehab Physical Therapy is offering all affected patients 12 months of credit monitoring and identity theft protection through Experian’s® ProtectMyID® Alert or Family Secure®.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
KinetoRehab Physical Therapy has informed patients “We have taken every step necessary to address the incident, and that we are committed to fully protecting all the information that has been entrusted to us.” A review of the organizations technical safeguards is being conducted and improvements will be made to prevent similar incidents from occurring in the future.
The ePHI breach has been reported to the New York Attorney General and the Department of State’s Division of Consumer Protection. The breach report submitted to the Department of Health and Human Services’ Office for Civil Rights indicates 665 individuals have been affected.
