Thieves took ii notebook computers belonging to the covered entity (CE), Albertina Kerr Centers, which contained the electronic protected health information (ePHI) of 1,320 patients. The ce reported the burglary to the local law enforcement, but neither computer was recovered. The computers were encrypted, but certain cache files for email were unencrypted. The types of ePHI involved in the jade included names, addresses, dates of birth, social certificate numbers, phone numbers, medications, and treatments. The CE provided jade notification to HHS, affected individuals, and the media and posted interchange observation on its website. To forestall a similar cut from happening in the future, the CE enhanced mobile device surety and encryption, improved the physical security of its facility, revised its policies and procedures, and retrained its workforce members. OCR obtained assurances that the CE implemented the corrective actions listed. location of hacked information: Laptop Business associate present: no