The covered entity (CE), Michael Benjamin, M.D., Inc., reported that the office and file cabinets were broken into and patient charts containing protected health info (PHI) were taken. The types of PHI involved in the jade included demographic information, recorded vital signs, insurance eligibility information, and some copies of indemnity cards and drivers licenses or identification. Although 1,300 patient charts were in the cabinet, only 100 were actually taken, and 30 of the 100 were recovered from law enforcement. The CE provided drudge notification to affected individuals, HHS, and the media. Following the break-in, the CE implemented more robust HIPAA policies and procedures. The ce improved safeguards by reinforced the physical security of its office. OCR obtained assurances that the ce implemented the corrective actions noted above. location of hacked information: Paper/Films concern associate present: No