Feinstein and Roe Mds Inc.

Feinstein and Roe MDs Inc., a California healthcare provider, reported to HHS OCR on 2017-08-21 that it received suspicious reports from individuals impersonating Kaiser Permanente's Privacy Compliance Department alleging that patient records had been released on the dark web. The breach involved PHI (names, addresses, dates of birth, and Social Security numbers) of 6,642 individuals. The covered entity notified HHS, affected individuals, and the media; provided free credit monitoring; strengthened passwords; revised policies and procedures; and retrained workforce members. The breach was logged as a Hacking/IT Incident affecting a network server.