Tandigm Health
ent_36e83665e001855b4c8c60aa
Disclosures
2
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7,376
nationwide · HHS OCR PA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Tandigm Health
- Normalized
- tandigm health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- Montana State AGas victim2018-11-21
Tandigm Health notified individuals of a potential vulnerability in a website that made PHI accessible from April 24, 2017, to Dec 31, 2017. Discovered Sept 25, 2018. No evidence of unauthorized access found. Affected data included name, DOB, medical, and insurance info. Remediation included security enhancements and 24-month identity protection.
- PENNSYLVANIAHHS OCRas victim2018-11-21
Tandigm Health (PA) reported to HHS on 2018-11-21 a Hacking/IT Incident affecting 7,376 individuals. A vulnerability on the covered entity's website allowed unauthorized individuals to bypass security safeguards and potentially access a network server database containing PHI, including demographic and clinical information. The CE immediately fixed the misconfiguration, tested and validated its security configuration, and notified HHS, affected individuals, and the media. OCR reviewed the CE's policies for Security Rule compliance.