On february 15, 2016, the covered entity (CE), Locust fork Pharmacy, discovered the interlock on ace of their storehouse units was broken. The storage unit contained boxes of records for approximately 5,000 individuals. Protected health Information (PHI) in the records included names, addresses, and birth dates. The ce determined that all the boxes were stacked in sequence, none was missing, and all remained sealed. The ce worked with local constabulary in the investigation of the incident, and updated its policies and procedures related to nag response, cut mitigation, and physical security of the memory unit. The CE provided hack notification to HHS and posted media notice in its geographic region for 2 weeks in mar 2016. OCR obtained assurances that the CE implemented the corrective actions listed above. location of hacked information: Other Business link present: No