Jennie Stuart Medical Center, Inc.

Jennie Stuart Medical Center (KY) reported to HHS OCR on 2016-09-23 a Hacking/IT Incident affecting 1,500 individuals. Hackers deployed ransomware on the CE's network server, encrypting data on top of existing CE encryption and demanding a ransom, which the CE paid. Breached PHI included names, addresses, dates of birth, SSNs, driver's license data, claims, credit card/bank account information, medical diagnoses, lab results, and medications. A forensic investigation was conducted and OCR obtained assurances of remediation.