Tillamook Chiropractic

On October 3, 2018, Tillamook Chiropractic, P.C. reported a malware security incident affecting 4,058 patients. The breach was discovered by its IT vendor on the billing system, which was located on a desktop computer and network server. The compromised protected health information (PHI) included names, addresses, dates of birth, driver's license numbers, Social Security numbers, claims and clinical information, financial details, diagnoses, lab results, and medications. In response, the entity removed the malware, rebuilt its server, encrypted hard drives, installed antivirus software, and updated its security policies. OCR provided technical assistance and confirmed corrective actions were implemented.