Ascend Clinical, LLC

Ascend Clinical LLC, a clinical reference laboratory, notified patients of a data security incident detected on May 31, 2020. An unauthorized user accessed and downloaded files containing PII and PHI, including names, addresses, SSNs, and medical data. Data was encrypted via ransomware. Ascend engaged Kroll for forensic investigation and identity monitoring services for affected individuals.

Ascend Clinical LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-04-21 and was reported on 2020-11-03. 943 Indiana residents were affected. 77,443 individuals affected in total.

Ascend Clinical LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-10-29. 280 Massachusetts residents were affected. The report records the breach type as electronic.

Ascend Clinical, LLC reported a phishing-induced ransomware incident discovered on May 31, 2020. Attackers accessed PHI and PII of 1,959 Washington residents. Ascend engaged forensic consultants, isolated systems, notified law enforcement, and provided one year of Kroll identity monitoring to affected patients.

Ascend Clinical LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2020-10-27. The breach occurred during 4/21/2020 - 6/15/2020. The breach was discovered on 5/31/20209/23/2020. 77,443 individuals were affected. Notice was sent on 10/27/2020.

Ascend Clinical LLC, a clinical reference laboratory specializing in kidney disease testing, experienced a ransomware incident. On May 31, 2020, Ascend detected encrypted data and unauthorized access. An attacker accessed and downloaded business records containing PHI, including names, addresses, medical diagnoses, and SSNs. Ascend engaged forensic consultants, restored systems, and offered one year of identity monitoring via Kroll.

Ascend Clinical LLC reported a security incident detected on May 31, 2020, involving a phishing scheme that led to ransomware encryption and unauthorized access to patient data. The breach affected 20 New Hampshire residents, exposing PII and PHI including names, addresses, SSNs, and medical diagnoses. Notifications were sent by October 26, 2020.

Ascend Clinical LLC, a healthcare entity based in Redwood City, CA, reported an external system breach (hacking) occurring on or about April 21, 2020. The incident compromised the names and Social Security Numbers of 77,443 individuals, including 17 Maine residents. Discovery occurred on May 31, 2020, with supplemental discovery on September 23, 2020. Ascend Clinical notified affected individuals in writing on October 26, 2020, and provided one year of identity and credit monitoring services through Kroll.

Ascend Clinical, LLC (a California healthcare provider) reported to HHS OCR on 2020-10-19 that an email phishing attack compromising numerous employee mailboxes exposed the ePHI of 77,443 individuals. Exposed data included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and prescribed medications. The entity notified HHS, affected individuals, and the media; offered free credit monitoring, identity theft, and fraud protection services; and implemented additional administrative, technical, and security safeguards along with staff retraining.

Ascend Clinical, LLC notified Montana residents of a security incident discovered on May 31, 2020, where phishing emails allowed attackers to access employee files containing names, DOBs, addresses, and SSNs. Ascend engaged forensic investigators, isolated systems, and offered one year of Kroll identity monitoring.