An Indiana mental health organization is sending out HIPAA breach notification letters to about 45,000 people after one of its providers failed to encrypt laptops containing clients' medical data and Social Security numbers.  Several laptops were stolen from the administrative office of Aspire Indiana on Nov. 7, 2014.  An investigation found that emails on the laptops contained client and employees' Social Security numbers, names and addresses as well as personal health information of Aspire clients. 1,548 of those notified had their Social Security numbers compromised. The organization routinely collects data on HIV care data, substance abuse treatment and mental health services.    "Our organization is committed to maintaining the privacy and security of the personal information in our control, and we sincerely regret this incident occurred," said Aspire's president and CEO Rich DeHaven, in a public notice. "We have taken steps to enhance our security, including upgrading our alarm and security systems.";