The Massachusetts Attorney General has announced that the Boston Children’s Hospital (BCH) has agreed to pay US$40,000 and take steps to prevent future security violations following allegations related to a data breach that affected patient information. The complaint against BCH alleged that an unencrypted, BCH-issued laptop was stolen from a BCH physician. Before the laptop was stolen, the physician received an email containing the protected health information of 2,159 patients. Although the physician took steps that he thought were adequate to remove the protected health information from the laptop, the information from the email remained on the laptop and encryption software had not been installed prior to the incident.

Attorney General’s press release