A laptop from the covered entity (CE), interference Services, was stolen from a workforce members vehicle. The electronic protected health info (ePHI) on the laptop included patient names, dates of birth, Medicaid numbers, and the names of the patients funding source for approximately 1,200 individuals. Upon discovering the hack, the ce filed a constabulary report. The ce provided cut notification to HHS, affected individuals, and the media. The CE improved physical security, sanctioned the involved workforce member, and retrained staff. OCR obtained assurances that the ce implemented the corrective actions listed. location of hacked information: Laptop Business relate present: no