| A regional hospital network agreed to a settlement with federal regulators after unencrypted laptops containing patient records were stolen. The resolution included corrective action requirements and a monetary penalty. Investigators cited a failure to conduct an accurate risk assessment. |