$150,000 Fine for Lost Thumb Drive
A dermatology practice recently faced a $150,000 fine after losing an unencrypted USB drive (also known as a flash drive or thumb drive). The device, stolen from a staff member’s vehicle, contained protected health information for over 2,200 patients. As a result, the practice not only paid the hefty fine but also agreed to implement a corrective action plan to address its HIPAA compliance issues. This case underscores the importance of securing sensitive data and avoiding costly compliance errors.