← All guides

Playbook

A laptop is missing

3 min read

A work laptop, tablet, or phone is lost or stolen. The key question is whether it was encrypted.

Step by step

1. Confirm it is really missing. Check the office, the car, and with the staff member.
2. Find out if it was encrypted (BitLocker on Windows, FileVault on Mac, or a passcode on a phone or tablet). Ask your IT support to confirm, and whether the password was stored with the device.
3. Lock or erase it remotely if it is managed (for example Microsoft Intune, Google, or Apple's Find My).
4. Change the passwords that were saved on it, and sign the device out of email and your EHR.
5. If it was stolen, file a police report and keep the report number. Insurers ask for it.
6. Call your cyber insurer and note the date and time you discovered the loss.

Encrypted or not

If the device was properly encrypted and the password was not with it, HHS generally does not treat the loss as a breach of unsecured patient information. If it was not encrypted and held or could reach patient information, treat it as a possible breach and follow the breach steps. Confirm either way with your insurer or attorney.

Prevent the next one

• Turn on full-disk encryption on every laptop today. It is built into Windows and macOS.
• Require a passcode on every phone and tablet that gets work email.
• Keep a simple list of every device and who has it.

Our audit checks encryption on every computer →