The Department of Health and Human Services announced the case of Hospice of North Idaho in January of 2013. HONI lost an unencrypted laptop containing 441 medical records.
During the investigation HHS found that the following:
1. They were not conducting risk assessments on mobile devices.
2. They had not developed policies or procedures with regards to mobile devices.
The significance of this event is that its the first fine HHS has issued for a breach of less than 500 records. However, HHS noted that HONI was cooperative and their fine only resulted in $50,000.