VAMalwareHealthcareHealthcareRansomwareStolen CredentialsParadisePHILowResolved

Family Physicians of Old Town Fairfax PC

bd_d0d3253369af5dc6 · schema v1 · pii pii-v1

Full breach record for Family Physicians of Old Town Fairfax PC →

On May 19, 2018, Family Physicians of Old Town Fairfax PC experienced a Paradise ransomware attack that infected its fax server. A malicious actor gained access via an open RDP port using a physician's account. The CE removed the fax server, shut down workstations, and engaged forensic investigators through counsel. Investigation found the actor only deployed ransomware and accessed top-level folders that did not contain PHI; Paradise is not known to exfiltrate data. The CE concluded there was a low probability of PHI compromise. OCR reviewed the risk assessment and corrective actions. Reported to HHS OCR on 2018-07-19 affecting 500 individuals.

HIPAA clock✓ HHS notified9 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident

Source provenance

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 19, 2018
Raw hash: 7a7723f131ae29a91cd9698ff59d638476c403c891afc70af50b816a2fd28cf8

Source filing

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.2 KB

Download View at source

Reporting entity

Name: Family Physicians of Old Town Fairfax PC
norm: family physicians of old town fairfax
Industry: Healthcare Provider

Victim entity

Name: Family Physicians of Old Town Fairfax PC
norm: family physicians of old town fairfax
Industry: Healthcare Provider
Industry: Healthcaresource default

Incident

Discovered: May 19, 2018
Materiality determined: —
Notification sent: —
Affected individuals: 500
Data types: PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1133 External Remote ServicesT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: HHS OCR review of risk assessment and security measures

Compliance

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: May 19, 2018
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: May 19, 2018 → Notified: not extracted	—	regulatory submission	HHS notified

Extraction provenance

Status: No extraction artifact recorded for this disclosure.