HIPAA Journal

MARCH 6, 2023

The types of information exposed varied from individual to individual and may have included names, addresses, medical information, health insurance information, Medicaid identification numbers, driver’s licenses, account and routing numbers, and Social Security numbers.

Electronic Medical Records 74

Electronic Medical Records HIPAA Licensing Nurses 74

HIPAA Journal

MARCH 30, 2022

That process concluded on February 25, 2022, when it was confirmed that files containing the personal and protected health information of plan members had been exfiltrated from its network. The attack appears to have occurred on or around March 10, 2022 and has affected the automatic refill line and mail order services of its pharmacy.

Ransomware 126

Ransomware Electronic Medical Records Licensing HIPAA 126

HIPAA Journal

NOVEMBER 7, 2022

The exposed information included names, addresses, dates of birth, Social Security numbers, dates of service, medical record numbers, Medicaid numbers, and some limited clinical information, such as treatment and diagnosis codes. Luke’s Health was notified about the breach on September 1, 2022.

Electronic Medical Records 75

Electronic Medical Records Ransomware HIPAA Licensing 75

HIPAA Journal

JUNE 16, 2022

Texas Tech University Health Sciences Center has confirmed that the protected health information of 1,290,104 patients was compromised in a data breach at its electronic medical record vendor, Eye Care Leaders. Eye Care Leaders said it detected a breach on Dec. No evidence of data exfiltration was found.

Electronic Medical Records 84

Electronic Medical Records HIPAA Health Insurance Licensing 84

HIPAA Journal

NOVEMBER 28, 2022

The attack was detected on June 20, 2022, and third-party forensics experts were engaged to investigate the incident and determine the scope of the attack. The investigation revealed an unauthorized third party first accessed its systems on June 10, 2022, several days prior to using ransomware to encrypt files.

Ransomware 103

Ransomware Electronic Medical Records HIPAA Licensing 103

HIPAA Journal

SEPTEMBER 28, 2022

in Iowa has recently confirmed that it was affected by the data breach at the electronic medical record provider, Eye Care Leaders. The attack exposed the protected health information of 542,776 current and former Wolfe Clinic patients. Reiter Affiliated Companies Reports June 2022 Cyberattack. Wolfe Clinic, P.C

Electronic Medical Records 73

Electronic Medical Records Ransomware Fraud HIPAA 73

HIPAA Journal

AUGUST 8, 2022

Carmel, IN-based Goodman Campbell Brain and Spine has started notifying 363,000 current and former patients that some of their protected health information was stolen prior to data being encrypted with ransomware and some of the stolen data has been published on the gang’s dark web data leak site.

Ransomware 89

Ransomware Electronic Medical Records HIPAA Licensing 89

HIPAA Journal

MARCH 16, 2023

The third-party forensic investigation confirmed the attacker accessed files that contained patients’ protected health information; however, its electronic medical record system was not affected. 95% of the compromised files only included an individual’s name.

Electronic Medical Records 62

Electronic Medical Records Health Insurance Ransomware HIPAA 62

Compliancy Group

JANUARY 6, 2022

Some files may have also contained Social Security numbers or driver’s license numbers, health insurance information, and/or clinical or treatment information. The Department of Health and Human Services “Wall of Shame” lists breaches affecting more than 500 patients. Providers Affected by the Ciox Vendor Email Breach.

HIPAA 52

HIPAA Electronic Medical Records Compliance Hospitals 52

HIPAA Journal

FEBRUARY 23, 2022

Third-party forensic investigators were retained to conduct an investigation to determine the nature and scope of the attack and on January 5, 2022, it was confirmed that certain files on its systems that contained patient information had been accessed. The types of information in the compromised files varied from patient to patient.

Electronic Medical Records 132

Electronic Medical Records HIPAA Health Insurance Medical Billing 132