Vail Valley Medical Center notifies 3,118 patients whose PHI was stolen by departing employee

HIPAA Journal reports:

Vail Valley Medical Center (VVMC) is in the process of notifying 3,118 patients of the inappropriate disclosure of some of their protected health information (PHI).

A physical therapist formerly employed at Howard Head Sports Medicine was discovered to have copied the PHI of patients and taken the data to his new employer. Prior to leaving employment, the physical therapist downloaded patient PHI onto a USB drive on two separate occasions.

VVMC discovered the former employee’s HIPAA violations on February 16, 2016.