The California Office of the Attorney General disclosed a data breach affecting Han Van Duong, M.D. on January 14, 2025, stemming from a burglary on October 17, 2024. Three laptop computers containing patient medical records and Social Security Numbers (SSNs) were stolen. While the exact number of impacted individuals remains undisclosed, the breach exposed highly sensitive personal and health data, posing risks of identity theft and financial fraud. Affected patients were offered credit monitoring services as a mitigative measure. The incident highlights vulnerabilities in physical security controls for devices storing protected health information (PHI), raising concerns over compliance with HIPAA and other data protection regulations. The theft of unencrypted or inadequately secured laptops exacerbates the severity, as the compromised data could be exploited for malicious purposes, including medical identity fraud or targeted phishing attacks against patients.