The Office of Civil Rights at the federal department of Health and Human Services conducted an investigation into a Massachusetts eye care group following a report of a security breach filed by the group. The investigation discovered several potential areas of violations including failure to adequately secure ePHI. The original security breach that resulted in the report was the theft of an employee laptop that contained ePHI. The was for totals $1.5 million.
See the story here