Protected Health Information Data Breaches Under HHS Investigation

Kehoe Law Firm, P.C. is making individuals aware of the following data breach cases of unsecured protected health information affecting 500 or more individuals currently under investigation by the U.S. Department of Health and Human Services, Office for Civil Rights:
Name of Covered Entity State Covered Entity Type Individuals Affected Breach Submission Date Type of Breach Location of Breached Information
Ascension Eastwood Clinics MI Healthcare Provider 999 04/23/2020 Unauthorized Access/Disclosure Email
Psychiatric Associates of North Carolina, Professional Association NC Healthcare Provider 1081 04/20/2020 Unauthorized Access/Disclosure Email
Beaumont Health MI Healthcare Provider 112211 04/17/2020 Hacking/IT Incident Email
Advocate Aurora Health WI Healthcare Provider 27137 04/16/2020 Hacking/IT Incident Email, Network Server
Medica Insurance Company MN Health Plan 802 04/15/2020 Unauthorized Access/Disclosure Paper/Films
Medica Health Plans MN Health Plan 1710 04/15/2020 Unauthorized Access/Disclosure Paper/Films
Hartford HealthCare CT Healthcare Provider 2651 04/13/2020 Hacking/IT Incident Email
Doctors Community Medical Center MD Healthcare Provider 18481 04/13/2020 Hacking/IT Incident Email
Arizona Endocrinology Center AZ Healthcare Provider 74122 04/10/2020 Unauthorized Access/Disclosure Electronic Medical Record
Corpus Christi Rehabilitation Hospital TX Healthcare Provider 507 04/10/2020 Hacking/IT Incident Email
Beacon Health Options, Inc. MA Business Associate 6723 04/10/2020 Loss Other Portable Electronic Device
Rehabilitation Hospital of Southern New Mexico NM Healthcare Provider 1843 04/10/2020 Hacking/IT Incident Email
UPMC Altoona Regional Health Services PA Healthcare Provider 13911 04/10/2020 Hacking/IT Incident Email
Brandywine Counseling & Community Services, Inc DE Healthcare Provider 4262 04/10/2020 Hacking/IT Incident Network Server
Colorado Department of Human Services, Office of Behavioral Health CO Healthcare Provider 8132 04/07/2020 Unauthorized Access/Disclosure Network Server
Healthcare Resource Group, Inc. WA Business Associate 3009 04/07/2020 Hacking/IT Incident Email
Andrews Braces NV Healthcare Provider 16622 04/07/2020 Hacking/IT Incident Network Server
Doctors HealthCare Plans, Inc. FL Health Plan 500 04/07/2020 Hacking/IT Incident Email
Child, Family and Community Services, Inc. CA Health Plan 1658 04/03/2020 Theft Laptop, Other Portable Electronic Device
University of Utah UT Healthcare Provider 5000 04/03/2020 Hacking/IT Incident Email
Confidio, LLC MD Business Associate 3600 03/31/2020 Hacking/IT Incident Email
Washington University School of Medicine MO Healthcare Provider 14795 03/31/2020 Hacking/IT Incident Email
Affordacare Urgent Care Clinics TX Healthcare Provider 57411 03/31/2020 Hacking/IT Incident Network Server
University of Minnesota Physicians MN Healthcare Provider 683 03/30/2020 Hacking/IT Incident Email
Brandywine Urology Consultants, PA DE Healthcare Provider 131825 03/27/2020 Hacking/IT Incident Desktop Computer, Email, Laptop, Network Server
Crossroads Technologies, Inc. PA Business Associate 897 03/27/2020 Hacking/IT Incident Network Server
Tryon Medical Partners, PLLC NC Healthcare Provider 701 03/27/2020 Unauthorized Access/Disclosure Email
Stockdale Radiology CA Healthcare Provider 10700 03/27/2020 Hacking/IT Incident Desktop Computer
David S Daley, DMD AZ Healthcare Provider 1000 03/26/2020 Theft Network Server
New Jersey Department of Human Services NJ Health Plan 2300 03/25/2020 Hacking/IT Incident Network Server
VA Sierra Nevada Health Care System NV Healthcare Provider 702 03/25/2020 Unauthorized Access/Disclosure Paper/Films
Renew Wellness Center, PLLC MT Healthcare Provider 730 03/23/2020 Theft Email, Other Portable Electronic Device
FACKLER FAMILY CHIROPRACTIC, LLC OH Healthcare Provider 1731 03/23/2020 Theft Paper/Films
Health Care Service Corporation IL Health Plan 575 03/23/2020 Unauthorized Access/Disclosure Email
Ambry Genetics Corporation CA Healthcare Provider 232772 03/22/2020 Hacking/IT Incident Email
University of Utah UT Healthcare Provider 3670 03/21/2020 Hacking/IT Incident Email
Georgia Department of Human Services GA Healthcare Clearing House 500 03/20/2020 Loss Paper/Films

Source: Ocrportal.hhs.gov (Accessed 04.30.2020)

NOTE: The U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal, lists all breaches reported within the last 24 months that are currently under investigation by the Office for Civil Rights.  The data reported herein does not include all cases currently under investigation by the Office for Civil Rights.  Resolved data breach reports and/or reports older than 24 months can be viewed at Ocrportal.hhs.gov. 

Have You Been Impacted by A Data Breach?

If so, please either contact Kehoe Law Firm, P.C. Partner Michael Yarnoff, Esq., (215) 792-6676, Ext. 804, [email protected], complete the form on the right or send an e-mail to [email protected] for a free, no-obligation case evaluation of your facts to determine whether your privacy rights have been violated and whether there is a basis for a data privacy class action.

Examples of the type of relief sought by data privacy class actions, include, but are not limited to, reimbursement of identity theft losses and of out-of-pocket costs paid by data breach victims for protective measures such as credit monitoring services, credit reports, and credit freezes; compensation for time spent responding to the breach; imposition of credit monitoring services and identity theft insurance, paid for by the defendant company; and improvements to the defendant company’s data security systems.

Data privacy class actions are brought on a contingent-fee basis; thus, plaintiffs and the class members do not pay out-of-pocket attorney’s fees or litigation costs.  Subject to court approval, attorney’s fees and litigation costs are derived from the recovery obtained for the class.

Kehoe Law Firm, P.C.

Business Owners, Coronavirus SBA Loans and Scammers

FTC Cautions Business Owners Applying For SBA Loans Through The Paycheck Protection Program or Economic Injury Disaster Loans Program To Be On The Lookout For Scams

Kehoe Law Firm, P.C. is making business owners aware that the FTC has provided guidance to help business owners avoid being scammed into providing sensitive business information, such as bank account numbers, employee Social Security numbers, and even money.

According to the FTC:

DO
DON’T
  • Don’t pay in advance for information. All the information from the SBA is free at sba.gov/coronavirus.
  • Don’t pay in advance for a government loan. You don’t have to pay up front to get an SBA loan.
  • Don’t give your information to someone who calls, emails, or texts you out of the blue. The SBA won’t call unsolicited to find out information about you or your business, or to ask you to apply for a loan. The SBA is not going to send you emails or text messages asking for sensitive information. If you get an email or text like this, delete it. It’s a scam.
  • Don’t apply for a loan without verifying the lender. Only SBA-authorized lenders can provide PPP loans, and other loans may be available through SBA directly. To find an SBA-authorized lender in your area, use this SBA tool.
  • Don’t click on links or reply to emails or text messages from someone you don’t know. If you click on the links, you could download malware to your computer or device or be connected to a scammer or hacker.

Also, the FTC recommends that business owners warn staff to be alert for spoofed emails and bogus calls, and, importantly, if you or your employees spot a scam, please let the FTC know at ftc.gov/complaint.

Source: Federal Trade Commission – FTC.gov

Kehoe Law Firm, P.C.

Robocall Suit Over Botox Commercial’s Related Text Messages

Telephone Consumer Protection Act Class Action Filed Against Allergan Related to Botox Advertising Text Messages

Kehoe Law Firm, P.C. is making consumers aware that on April 24, 2020, a class action lawsuit alleging violations of the Telephone Consumer Protection Act was filed against Allergan, Inc. in United States District Court, Central District of California.

The complaint alleges that Plaintiff, after seeing a Botox commercial, texted “SAVE” to short code 27747 “solely to confirm his eligibility for discounted or free pharmaceuticals.”  In response to Plaintiff’s “SAVE” text message, Defendant Allergan, allegedly, sent the following two text messages to Plaintiff’s cell phone number from short code 64600:

Hello, please note that Allergan has an additional California Privacy Policy that you can view at www.allergan.com/privacy/ccpa

***

Are you eligible for the BOTOX¿ Saving Program? You’ll get 4 questions to answer via text. Terms & Conditions: bit.ly/2RvxiWr Msg & data rate may apply. STOP to end. HELP for help. See full Product Information, including Boxed Warning: bit.ly/2RKyxW4

(Q1 of 4) Do you have commercial health insurance or commercial prescription drug insurance? Reply YES or NO.

The Plaintiff, according to the complaint, never responded to Allergan’s text messages, and Defendant sent the following additional text message advertisement to Plaintiff’s cell phone:

Are you still interested in BOTOX¿ Savings Program? Reply YES to continue enrollment, STOP to end. See full Product Information, including Boxed Warning: bit:ly/2RKyxW4

Allergan’s commercial, according to the complaint, did not inform the Plaintiff that Plaintiff was authorizing Allergan to send him text messages using an Automatic Telephone Dialing System, and “[t]he source of each of the unsolicited SMS text messages sent by Defendant to the [Plaintiff’s] number was 27747, which is an SMS short code owned or leased by or on behalf of Defendant, and is used to operate Defendant’s text message campaign, including the sending of SMS text messages telemarketing and advertising various of Defendant’s goods and services such as Botox.”

Do You Believe You Are a Victim of Illegal Robocalls, Text Messages, “Junk” Faxes or Telemarketing Sales Calls?

If you have received illegal robocalls, text messages, “junk” faxes or telemarketing sales calls, you may be able to recover at least $500 for each illegal call, text or fax you received and, possibly, as much as $1,500 for each illegal call, text message or facsimile that was made either willfully or knowingly in violation of the Telephone Consumer Protection Act.

To help evaluate your potential legal claims under the Telephone Consumer Protection Act, please complete KLF’s confidential Robocall Questionnaire or, if you prefer to speak with an attorney, please complete the form above on the right, e-mail [email protected] or contact Michael Yarnoff, Esq., [email protected], (215) 792-6676, Ext. 804, for a free, no-obligation evaluation of your potential legal rights.

Kehoe Law Firm, P.C.

Fuel Pump Defect Results In Subaru Vehicle Recall

Subaru Recalls Approximately 200,000 Subaru Vehicles With Defective Low-Pressure Denso Fuel Pumps – “Dangerous Defect” In Low-Pressure Fuel Pump Can Cause Engine Stalling, Increasing Crash Risk

Kehoe Law Firm, P.C. is making consumers aware that on April 23, 2020, a class action lawsuit was filed in United States District Court, Northern District of Alabama, against Subaru of America, Inc., Subaru Corporation (collectively, “Subaru”) and Denso Corporation and Denso International America, Inc. (collectively, “Denso”).

Subaru Submits Part 573 Safety Recall Report Recalling Certain Model Year 2019 Subaru Ascent, Impreza, Legacy, and Outback Vehicles

According to the class action complaint, Subaru, in the Part 573 Safety Recall Report,

. . . identified a dangerous defect in the low-pressure fuel pump which can fail and cause the [r]ecalled [v]ehicles to unexpectedly stall and cause engine shut down:

The affected vehicles may be equipped with a low pressure fuel pump produced during a specific timeframe that may include an impeller which has been manufactured with a lower density. If the surface of the lower density impeller is exposed to solvent drying for longer periods of time, it may develop fine cracks. These cracks may lead to excessive fuel absorption, resulting in impeller deformation. Over time, the impeller may become deformed enough to interfere with the body of the fuel pump, potentially causing the low pressure fuel pump to become inoperative. [Emphasis added.]

Approximately 200,000 vehicles are covered by Subaru’s vehicle recall, including certain Model Year 2019 Subaru Ascent, Impreza, Legacy, and Outlook vehicles; however, according to the complaint, the “. . . same dangerous condition is present in all 2013-2019 Subaru manufactured vehicles equipped with Denso made low-pressure fuel pumps with a part number prefix 42022 (‘Class Vehicles’) which gave rise to the [r]ecall.” [Emphasis added.]

According to the complaint:

Subaru concluded that the Fuel Pump Defect in the Class Vehicles presents an immediate and unreasonable risk of physical injury or death when used in their intended, foreseeable, and ordinary purpose.

The Fuel Pump Defect in the Class Vehicles exposes occupants and others to extreme danger, or even death. A vehicle that stalls or suffers engine shutdown is at heightened risk for collision. A vehicle that stalls or suffers engine shutdown causes drivers to react to remove themselves from danger, typically by exiting the road. Drivers stranded on the side of the road experience a heightened risk of danger, whether it is from other vehicles or weather elements.

Fuel pump failure can prevent the driver from accelerating at the necessary and anticipated pace. Diminished acceleration ability creates unexpected hazards, startling drivers of the Class Vehicles and other drivers in their proximity. Finally, once a Class Vehicle fuel pump fails, the vehicle becomes totally inoperable and will not start.

Owners or lessees of 2013-2019 Subaru manufactured vehicles equipped with Denso-made, low-pressure fuel pumps with a part number prefix 42022 are encouraged to contact Kehoe Law Firm, P.C. to discuss potential legal claims.
Kehoe Law Firm, P.C.

Multi-Level Marketers Warned Regarding Health and Earnings Claims

FTC Sends Warning Letters To Multi-Level Marketers Regarding Health and Earnings Claims They or Their Participants Make Related to Coronavirus – Warning Letters Target Companies Pitching Business Opportunities, Supposed Health Benefits In Response to COVID-19 Pandemic

Kehoe Law Firm, P.C. is making consumers aware that the Federal Trade Commission announced it has sent 10 letters warning multi-level marketing companies (“MLMs”) to remove and address claims that they or their participants are making about their products’ ability to treat or prevent coronavirus disease or about the earnings people who have recently lost income can make, or both.

The FTC stated that according to the U.S. Food and Drug Administration, there currently are no products that are scientifically proven to treat or prevent the virus.

The warning letters highlight specific claims made by the companies or their distributors in social media posts and videos posted online, including:

  • A video that includes the statement, “I can tell you that there’s thousands of people that are out of work right now. They’re all looking for a way to go earn money. This is a great stimulus package, because you get to teach somebody how to go earn $1,730 literally in their first 10 days in the business.”
  • A social media post that said, “Got the coronavirus heebeegeebees? Boost your immunity with this amazing deal!!!!”

The FTC sent the warning letters to the companies listed below, and the recipients are grouped based on the type of claims made.

Both Health and Earnings Claims
Earnings Claims
Health Claims

The FTC has previously sent a number of warning letters about health claims related to the coronavirus pandemic, but this group of letters is the first to also include warnings related to claims about potential earnings related to the economic fallout from the pandemic.

In letters alleging unsubstantiated health claims, the FTC states that one or more of the efficacy claims made by the companies are unsubstantiated, because they are not supported by scientific evidence, and, therefore, violate the FTC Act. In letters alleging unsubstantiated earnings claims, the FTC reminds the companies about what constitutes a false or misleading earnings claim that would violate the FTC Act.

The letters refer the companies to the agency’s guidance for MLMs, remind them that they are responsible for the claims made by their members and representatives, and advise the recipients that they and their members must immediately cease making all claims that would be false or misleading.  The letters also instruct the recipients to notify the FTC within 48 hours about the specific actions they have taken to address the agency’s concerns.

Source: Federal Trade Commission – FTC.gov

Kehoe Law Firm, P.C.

(more…)

Jeep Cherokee, Jeep Renegade, Jeep Compass Owners/Lessees

Alleged Engine “Oil Consumption Defect” In Jeep Cherokee (2015-Present), Jeep Renegade (2015-Present), And Jeep Compass (2017-Present) Vehicles 

Kehoe Law Firm, P.C. is making consumers aware that on April 23, 2020, a class action lawsuit was filed against FCA US LLC in United States District Court, Central District of California, on behalf of all individuals in the United States who purchased or leased Jeep vehicles equipped with a 2.4L Tigershark Inline 4-Cylinder engine designed, manufactured, marketed, distributed, sold, warranted and/or serviced by FCA US LLC.  The “Class Vehicles,” according to the complaint, consist of Jeep Cherokees (2015-Present), Jeep Renegades (2015-Present), and Jeep Compasses (2017-Present). 

The complaint alleges that the Defendant “fail[ed] to disclose a uniform and widespread defect in the engine of an entire class of automobiles causing excessive engine oil consumption that poses an unreasonable safety risk to the driver and passengers of the vehicle.” [Emphasis added.]

Allegedly, the 2.4L Tigershark Inline 4-Cylinder engine in the Class Vehicles

. . contains one or more design and/or manufacturing defects that prevents the engine from properly using and maintaining an adequate amount of engine oil. Instead, the defect causes the oil—which serves essential lubrication and heat management functions within the engine—to leak, to burn off, and to be consumed at an abnormally high rate (the “Oil Consumption Defect”). The Oil Consumption Defect causes the Class Vehicles to go into ‘limp mode’ and to stall, and, ultimately, will cause, and has caused in numerous instances . . . catastrophic damage to the engine to the point that the entire engine needs to be replaced.

The complaint further alleges that

the Oil Consumption Defect is a safety concern because it prevents the engine from maintaining the correct level of engine oil and causes excessive oil consumption at a rate that cannot be reasonably anticipated or predicted. Further, the Oil Consumption Defect is unreasonably dangerous because it can cause the engine and/or its related components to fail, to enter ‘limp mode,’ or to stall while the Class Vehicles are in operation, at any time and under any driving conditions or speeds, thereby exposing the Class Vehicle drivers, their passengers, and other drivers to serious risk of collision and injuries. 

. . .

On information and belief, when class members and dealerships inform Defendant of the Oil Consumption Defect, Defendant acknowledges that this is a ‘known issue’ and may perform temporary repairs which do not address the issue, including, but not limited to, adding oil, changing oil frequently, performing an ‘Oil Consumption Test,’ and replacing various engine components. [Emphasis added.]

If you are a purchaser or lessee of either a Jeep Cherokee (2015-Present), Jeep Renegade (2015-Present), or Jeep Compass (2017-Present) with a 2.4L Tigershark Inline 4-Cylinder engine designed, manufactured, marketed, distributed, sold, warranted and/or serviced by FCA US LLC, please contact Kehoe Law Firm, P.C. to discuss potential legal claims. 
Kehoe Law Firm, P.C.