OH Muhlenberg, LLC

OH Muhlenberg, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-11-16. 9 Massachusetts residents were affected. The report records the breach type as electronic.

OH Muhlenberg, LLC reported to HHS on 2015-11-13 a Hacking/IT Incident affecting 84681 individuals. The FBI notified the entity on September 16, 2015, that its systems were infected with QuakBot malware, potentially present since January 1, 2012. The breach exposed PHI including names, DOBs, SSNs, and financial data across multiple devices. The entity decommissioned affected systems, upgraded hardware, improved antivirus, and provided security training.

OH Muhlenberg, LLC notified patients, employees, and next of kin of a security incident involving a keystroke logger infection on hospital computers. The infection, potentially active since January 2012, was detected on September 16, 2015, after FBI notification. Affected data included names, SSNs, driver's licenses, health information, financial account numbers, and payment card details. The company engaged forensic investigators, blocked unauthorized IPs, disabled malware, and offered credit monitoring.