Brooke Army Medical Center, near Houston, Tex. revealed that the personal health records of 1,272 patients may have been compromised because of a car break-in.
The hospital reported that a three-ring Army binder was removed this past fall from the parked car of an unidentified BAMC case manager.
"The binder may have contained the names, home addresses, home telephone numbers and patient health information on soldiers and their families," a release stated.
The release said that the theft, which occurred Oct. 16, wasn't reported to the media until now because of "a recent change to federal law."
The theft was immediately reported to San Antonio police and Defense Department law enforcement, and patients were informed Oct. 27. BAMC also said that it notified all "potentially impacted patients" to help mitigate damage from the breach, the release said. Patients received a list of protective measures in a letter as well as Federal Trade Commission guidance.