A Harris County (TX) Hospital District administrator probably violated the Health Insurance Portability and Accountability Act when she downloaded medical and financial records for 1,200 patients with HIV, AIDS, and other medical conditions onto a flash drive that later was lost or stolen. The hospital district has released little information about the situation, but issued a brief statement saying patients affected by the breach would receive a letter in the mail and would be allowed to enroll in a credit protection program at the district's expense. The district has strengthened its policies and procedures regarding the use of transportable media devices, according to the statement.