Clinivate LLC

Clinivate, LLC, an electronic health records vendor, experienced unauthorized access to systems containing personal and health information between March 12 and March 21, 2022. The incident was discovered on March 23, 2022. Affected data may include names, Social Security numbers, medical record numbers, and treatment information. Clinivate engaged forensic investigators, notified the FBI, and enhanced security measures.

Clinivate, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-12 and was reported on 2022-07-22. 6 Indiana residents were affected. 70,303 individuals affected in total.

Clinivate, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-07-22. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Clinivate, LLC, an EHR vendor, notified Montana residents of a data breach where unauthorized access occurred between March 12-21, 2022. Clinivate discovered the activity on March 23, 2022. Compromised data included names, DOBs, medical record numbers, PHI, and payment info. The FBI was notified, and forensic investigators were engaged.

Clinivate LLC, a California-based Business Associate, reported to HHS OCR on 2022-06-02 a ransomware attack affecting 77,652 individuals. PHI on network servers included names, addresses, dates of birth, drivers' license and Social Security numbers, claims information, diagnoses, lab results, and medications prescribed. The BA notified HHS, affected individuals, and the media. Remediation included additional technical safeguards, credit monitoring, and employee retraining. OCR provided technical assistance regarding HIPAA Rules.