MAPFRE Life Assurance Company of Puerto Rico learned the hard way about the risk of loss of patient information with portable devices like USBs, even when they are stored in the IT Department.

On September 29, 2011, an unencrypted portable USB storage device, which was left overnight in the IT Department, was stolen by an…