As announced on the Health and Human Services website:

$3.9 Million HIPAA Breach Settlement

Feinstein Institute for Medical Research agreed to pay the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) $3.9 million to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules and will undertake a substantial corrective action plan to bring its operations into compliance.

What? Another Laptop Lost?

In 2012, a laptop with electronic protected health information (ePHI) records of about 13,000 patients and research participants was stolen from an employee’s car.  Data included names of research participants, dates of birth, addresses, social security numbers, diagnoses & lab test results, medications, and other medical info.

> Read more on HHS website