DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

SunBridge Healthcare notifies 3,830 residents of stolen laptop

Posted on July 14, 2010 by Dissent

On July 9, SunBridge Healthcare Corporation of New Mexico issued the following press release:

A password-protected laptop computer, containing resident information from 10 states was stolen in May 2010. The states involved are Arizona, California, Colorado, Idaho, Montana, New Mexico, Oklahoma, Utah, Washington and Wyoming.

The theft was immediately reported to local law enforcement and the company’s privacy officer. After thorough investigations by our compliance and information technology departments, working with outside experts, we concluded that the information on the stolen laptop included names, medical record numbers, dates of service, and clinical data, as well as social security and health insurance numbers. No credit card data or other financial information was stored on the stolen laptop.

Although there has been no indication that the information on the computer has been improperly accessed or misused. The company engaged Kroll Inc., to operate a toll-free call center to address any questions, address identity theft concerns, and provide comprehensive identity theft safeguards to individuals affected by this incident. Kroll’s Fraud Solutions team has more experience than any other organization when it comes to helping people who have encountered the unintentional exposure of confidential data.

In addition, the company has taken a number of steps to prevent further breaches in the future, including reinforcing with its staff the proper protocols required to maintain the security of personal information. Also, the company’s internal encryption practices have been strengthened to ensure that no laptop computers are issued to employees without encryption software installed.

The centers involved are in the process of notifying each of the patients, residents or their guardians, as well as the U.S. Department of Health and Human Services. These notifications are being made pursuant to the Health Information Technology for Economic and Clinical Health Act approved in 2009. Individuals who would like more information may call 1-877-309-0173, toll-free, between 6 a.m. and 3 p.m. (Pacific Time), Monday through Friday.

According to the corporation’s report to the U.S. Department of Health & Human Services, 3,830 residents had data on the stolen laptop.

Cross-posted from PHIprivacy.net

Category: Breach IncidentsBreach TypesHealth DataTheftU.S.

Post navigation

← TN: Centerstone client records swept away in flood waters
California Department of Health Care Services notifies 29,808 of missing CD →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Washington Post investigating cyberattack on journalists, WSJ reports
  • Resource: State Data Breach Notification Laws – June 2025
  • WestJet investigates cyberattack disrupting internal systems
  • Plastic surgeons often store nude photos of patients with their identity information. When would we call that “negligent?”
  • India: Servers of two city hospitals hacked; police register FIR
  • Ph: Coop Hospital confirms probe into reported cyberattack
  • Slapped wrists for Financial Conduct Authority staff who emailed work data home
  • School Districts Unaware BoardDocs Software Published Their Private Files
  • A guilty plea in the PowerSchool case still leaves unanswered questions
  • Brussels Parliament hit by cyber-attack

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets
  • States sue to block the sale of genetic data collected by DNA testing company 23andMe

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.