Protected Health Information Data Breaches Under HHS Investigation

Apr 30, 2020 | Consumer Protection, Employment & Technology Archive

Kehoe Law Firm, P.C. is making individuals aware of the following data breach cases of unsecured protected health information affecting 500 or more individuals currently under investigation by the U.S. Department of Health and Human Services, Office for Civil Rights:
Name of Covered Entity State Covered Entity Type Individuals Affected Breach Submission Date Type of Breach Location of Breached Information
Ascension Eastwood Clinics MI Healthcare Provider 999 04/23/2020 Unauthorized Access/Disclosure Email
Psychiatric Associates of North Carolina, Professional Association NC Healthcare Provider 1081 04/20/2020 Unauthorized Access/Disclosure Email
Beaumont Health MI Healthcare Provider 112211 04/17/2020 Hacking/IT Incident Email
Advocate Aurora Health WI Healthcare Provider 27137 04/16/2020 Hacking/IT Incident Email, Network Server
Medica Insurance Company MN Health Plan 802 04/15/2020 Unauthorized Access/Disclosure Paper/Films
Medica Health Plans MN Health Plan 1710 04/15/2020 Unauthorized Access/Disclosure Paper/Films
Hartford HealthCare CT Healthcare Provider 2651 04/13/2020 Hacking/IT Incident Email
Doctors Community Medical Center MD Healthcare Provider 18481 04/13/2020 Hacking/IT Incident Email
Arizona Endocrinology Center AZ Healthcare Provider 74122 04/10/2020 Unauthorized Access/Disclosure Electronic Medical Record
Corpus Christi Rehabilitation Hospital TX Healthcare Provider 507 04/10/2020 Hacking/IT Incident Email
Beacon Health Options, Inc. MA Business Associate 6723 04/10/2020 Loss Other Portable Electronic Device
Rehabilitation Hospital of Southern New Mexico NM Healthcare Provider 1843 04/10/2020 Hacking/IT Incident Email
UPMC Altoona Regional Health Services PA Healthcare Provider 13911 04/10/2020 Hacking/IT Incident Email
Brandywine Counseling & Community Services, Inc DE Healthcare Provider 4262 04/10/2020 Hacking/IT Incident Network Server
Colorado Department of Human Services, Office of Behavioral Health CO Healthcare Provider 8132 04/07/2020 Unauthorized Access/Disclosure Network Server
Healthcare Resource Group, Inc. WA Business Associate 3009 04/07/2020 Hacking/IT Incident Email
Andrews Braces NV Healthcare Provider 16622 04/07/2020 Hacking/IT Incident Network Server
Doctors HealthCare Plans, Inc. FL Health Plan 500 04/07/2020 Hacking/IT Incident Email
Child, Family and Community Services, Inc. CA Health Plan 1658 04/03/2020 Theft Laptop, Other Portable Electronic Device
University of Utah UT Healthcare Provider 5000 04/03/2020 Hacking/IT Incident Email
Confidio, LLC MD Business Associate 3600 03/31/2020 Hacking/IT Incident Email
Washington University School of Medicine MO Healthcare Provider 14795 03/31/2020 Hacking/IT Incident Email
Affordacare Urgent Care Clinics TX Healthcare Provider 57411 03/31/2020 Hacking/IT Incident Network Server
University of Minnesota Physicians MN Healthcare Provider 683 03/30/2020 Hacking/IT Incident Email
Brandywine Urology Consultants, PA DE Healthcare Provider 131825 03/27/2020 Hacking/IT Incident Desktop Computer, Email, Laptop, Network Server
Crossroads Technologies, Inc. PA Business Associate 897 03/27/2020 Hacking/IT Incident Network Server
Tryon Medical Partners, PLLC NC Healthcare Provider 701 03/27/2020 Unauthorized Access/Disclosure Email
Stockdale Radiology CA Healthcare Provider 10700 03/27/2020 Hacking/IT Incident Desktop Computer
David S Daley, DMD AZ Healthcare Provider 1000 03/26/2020 Theft Network Server
New Jersey Department of Human Services NJ Health Plan 2300 03/25/2020 Hacking/IT Incident Network Server
VA Sierra Nevada Health Care System NV Healthcare Provider 702 03/25/2020 Unauthorized Access/Disclosure Paper/Films
Renew Wellness Center, PLLC MT Healthcare Provider 730 03/23/2020 Theft Email, Other Portable Electronic Device
FACKLER FAMILY CHIROPRACTIC, LLC OH Healthcare Provider 1731 03/23/2020 Theft Paper/Films
Health Care Service Corporation IL Health Plan 575 03/23/2020 Unauthorized Access/Disclosure Email
Ambry Genetics Corporation CA Healthcare Provider 232772 03/22/2020 Hacking/IT Incident Email
University of Utah UT Healthcare Provider 3670 03/21/2020 Hacking/IT Incident Email
Georgia Department of Human Services GA Healthcare Clearing House 500 03/20/2020 Loss Paper/Films

Source: Ocrportal.hhs.gov (Accessed 04.30.2020)

NOTE: The U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal, lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.  The data reported herein does not include all cases currently under investigation by the Office for Civil Rights.  Resolved data breach reports and/or reports older than 24 months can be viewed at Ocrportal.hhs.gov. 

Have You Been Impacted by A Data Breach?

If so, please either contact Kehoe Law Firm, P.C. Partner Michael Yarnoff, Esq., (215) 792-6676, Ext. 804, [email protected], complete the form on the right or send an e-mail to [email protected] for a free, no-obligation case evaluation of your facts to determine whether your privacy rights have been violated and whether there is a basis for a data privacy class action.

Examples of the type of relief sought by data privacy class actions, include, but are not limited to, reimbursement of identity theft losses and of out-of-pocket costs paid by data breach victims for protective measures such as credit monitoring services, credit reports, and credit freezes; compensation for time spent responding to the breach; imposition of credit monitoring services and identity theft insurance, paid for by the defendant company; and improvements to the defendant company’s data security systems.

Data privacy class actions are brought on a contingent-fee basis; thus, plaintiffs and the class members do not pay out-of-pocket attorney’s fees or litigation costs.  Subject to court approval, attorney’s fees and litigation costs are derived from the recovery obtained for the class.

Kehoe Law Firm, P.C.