The covered entity (CE), St. Joseph-Berea discovered that an external back-up hard drive attached to a workstation was missing. The external hard ride included the protected health information of 1,986 individuals, including patients names, dates of nativity and information related to bone density scans. The ce provided drudge notification to HHS, affected individuals, and the media and performed substitute mark by posting on its website. Following the hack, the ce updated its procedures to boundary the utilization of external hard drives, encrypted all laptops, desktops, servers, and portable media devices, and improved safeguards by monitoring physical workstation access and maintaining reflexion cameras. As a outcome of OCRs investigation, OCR obtained assurances that the corrective actions listed above were completed. location of hacked information: Other, Other Portable Electronic Device concern associate present: No