CarePointe ENT

CarePointe ENT (Indiana) reported to HHS on 2021-08-23 a ransomware attack affecting 48,742 individuals. Breached information was located on a Network Server. Compromised PHI included names, addresses, dates of birth, Social Security numbers, diagnoses and conditions, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement, and provided substitute notice. Additional administrative and technical safeguards were implemented in response.

CarePointe ENT reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-08-23. 2 Massachusetts residents were affected. The report records the breach type as electronic.

CarePointe ENT notified patients of a ransomware attack on June 25, 2021. Attackers encrypted systems containing electronic healthcare records, potentially exposing names, addresses, DOBs, SSNs, and medical insurance info. The organization increased threat detection and restricted remote access. No evidence of misuse was found, but unauthorized access could not be ruled out.

CarePointe ENT reported a data breach to the Indiana Attorney General. The breach occurred on 2021-06-25 and was reported on 2021-08-23. 45,002 Indiana residents were affected. 48,742 individuals affected in total.

CAREPOINTE ENT filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-340). The register records the breach as discovered on June 25, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.