Lost medical records

In what seems to be a not-so-unusual case, the records of approximately 365,000 patients in Oregon and Washington were stolen from the car of a Providence Home Services employee at the employee’s home.  They had been taken there as part of the company’s backup procedure.  Do I really need to tell anyone that backups need to be moved to secure locations, and not just random homes?  Oh, and most of the data was stored unencrypted.  Ooops.