Minnesota AG sues Debt Collection Agency for Health Privacy Violations

The suit, which was filed in Federal District Court in Minnesota, alleges that Accretive Health, Inc. failed to adequately safeguard patients’ protected health information (“PHI”). This failure contributed to a July 2011 information security breach when an Accretive employee left an unencrypted laptop containing information of approximately 23,500 patients in a rental car. The laptop was stolen and has not yet been recovered.

http://www.huntonprivacyblog.com/2012/01/articles/minnesota-ag-sues-debt-collection-agency-for-health-privacy-violations/