“The information included patient names, treatment dates, short medical treatment summaries and medical record numbers. No home addresses, billing information and Social Security numbers were stored on the laptop.” Or, so says the report.

Here are our standard elements:

1. The laptop was stolen from a parked car.
2. The breaching organization says that the information was “password protected,” insinuating that that constitutes some bona fide protection.
3. The breaching organization claims ID theft is unlikely.

All of these are standard boilerplate for such a breach, but there’s no mention of trackability, remote data deletion, or encryption.

For those affected, OHSU says you’re not at much risk. Hopefully that’s a comfort to you. Hopefully.