Accretive's Breach: Failed to provide reasonable and appropriate security measures.

The FTC alleged in a complaint against Accretive that the company failed to provide reasonable and appropriate security measures and procedures to protect consumers’ personal information, including sensitive personal health information. The failure to adequately safeguard the data led to a July 2011 incident in Minneapolis, Minn., when an Accretive employee’s unencrypted laptop computer containing data on 23,000 patients of the company’s hospital clients was stolen from the worker’s car.
http://smlrgroup.com/compliance-gets-real-accretive-health-breach-settles-ftc/