Anesthesia Associates of Kansas City notified their patients about a data breach that exposed their personal data. They immediately began an investigation and determined that the patient schedules exposed information including some patients’ names, dates of birth, types of surgery, dates of surgery, and the name of the patient’s surgeon. Patient addresses, social security numbers, insurance, and financial information were not included in the schedules. To help prevent something like this from happening in the future, they have reinforced policies prohibiting the non-essential removal of patient information from the facility and implemented new requirements designed to safeguard patient data.