Connecticut-based Hartford Hospital and Hopkinton, Mass.-based EMC, the hospital's cloud solutions provider, have agreed to pay $90,000 to the state for a HIPAA violation following the theft of a laptop containing unencrypted protected health information.
The laptop was reported stolen from the home of an EMC employee in June 2012 and was never recovered, according to an Assurance of Voluntary Compliance document. The laptop contained data from approximately 8,883 Connecticut residents.
EMC reported the theft the following day and although it was never recovered, Hartford Hospital has stated there is no evidence any of the PHI or other personal information was misused. Since reporting the theft, the hospital and EMC have provided all affected patients with free credit and identity theft monitoring.
"To resolve the alleged violations of HIPAA and other applicable laws arising out of or related to the incident, the parties will make one payment to the State of Connecticut in the total amount of $90,000," the document reads.