We represented a large healthcare vendor in a data security investigation involving an employee theft of company hardware containing hundreds of thousands of PHI records. Our investigation led to recovery of the data, followed by a forensic examination that negated the need for notification and reporting.