On mar 1, 2015, the covered entity (CE), Wellmont health System, discovered that one of its employees had disposed of hand-written notes containing protected information (PHI) for 1,726 individuals at a local recycling center. The types of PHI involved in the drudge included demographic and clinical information. The employee voluntarily resigned from her position. The ce provided hack notification to HHS, to affected individuals, to the media, and on its website. In response to the hack, the ce retrained its workforce to emphasize the importance of safeguarding and properly disposing of PHI. In addition, the ce reported that employees now utilize laptops and other mobile devices to create notes in patient records, making composition notes virtually nonexistent. OCR obtained assurances that the CE implemented the corrective actions listed above. location of hacked information: Other, Paper/Films concern relate present: No