Family Physicians of Old Town Fairfax PC

On May 19, 2018, Family Physicians of Old Town Fairfax PC experienced a Paradise ransomware attack that infected its fax server. A malicious actor gained access via an open RDP port using a physician's account. The CE removed the fax server, shut down workstations, and engaged forensic investigators through counsel. Investigation found the actor only deployed ransomware and accessed top-level folders that did not contain PHI; Paradise is not known to exfiltrate data. The CE concluded there was a low probability of PHI compromise. OCR reviewed the risk assessment and corrective actions. Reported to HHS OCR on 2018-07-19 affecting 500 individuals.