Family Service Rochester

Family Service Rochester notified individuals of a ransomware incident discovered on Jan 26, 2017, involving unauthorized access via a single user account starting Dec 26, 2016. Affected data included PII and medical information. The organization terminated access, notified law enforcement, and offered one year of identity protection services.

Family Service Rochester, a Minnesota healthcare provider, discovered on January 26, 2017 that an unauthorized user had accessed a computer server containing names, addresses, dates of birth, and Social Security numbers of approximately 17,037 patients. The entity terminated access to the remote desktop and the compromised "programs" account, disabled stale accounts, revised HIPAA policies, and notified HHS, affected individuals, and the media.

Family Service Rochester, a nonprofit in Rochester, MN, experienced a ransomware incident. Unauthorized access via a single user account occurred from Dec 26, 2016 to Jan 25, 2017. Discovered Jan 26, 2017. Data accessed included names, addresses, DOBs, and medical info. Notifications sent Feb 21, 2017 to affected individuals, including 2 NH residents.

Family Service Rochester reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-02-17. 8 Massachusetts residents were affected. The report records the breach type as electronic.