Tallahassee Memorial HealthCare, Inc.

Tallahassee Memorial Healthcare, Inc. (FL) reported to HHS on 2023-03-31 a Hacking/IT Incident (ransomware attack) affecting 20,376 individuals. Breached information was located on Network Server. PHI involved included names, addresses, dates of birth, Social Security numbers, health insurance information, medical record numbers, patient account numbers, and some treatment information. The CE notified HHS, affected individuals, and media, and implemented additional administrative, technical, and security safeguards.

Tallahassee Memorial Healthcare (TMH) notified the NH AG of a cyber-attack on its vendor Jobscience, Inc. in May 2018. TMH was notified on Sept 26, 2018. One NH resident's PII (name, DOB, SSN, credentials) was exposed. TMH mailed notices on Oct 17, 2018, and offered 1 year of credit monitoring.

Tallahassee Memorial HealthCare, Inc. notified Montana AG of a third-party vendor (Jobscience, Inc.) cyber-security attack exposing job applicant PII (names, addresses, SSNs, DOBs, credentials) from March 2005 to August 2018. Incident discovered Sept 26, 2018. Notices sent Oct 10, 2018. No misuse indicated. Credit monitoring offered.

Tallahassee Memorial HealthCare, Inc. reported to HHS on 2016-05-20 a Hacking/IT Incident affecting 505 individuals. An employee attempted to upload PHI — including patient names, insurance numbers, payor financial information numbers, and account numbers — to an unauthorized website. The CE sanctioned the employee, flagged accounts in its billing system, revised its website filter, updated employee training, and provided free credit monitoring. Breached information located on Other. No business associate was involved. OCR obtained corrective-action assurances.