Harrisburg Gastroenterology Ltd. and Harrisburg Endoscopy and Surgery Center

Harrisburg Gastroenterology Ltd. and Harrisburg Endoscopy and Surgery Center notified the NH AG on April 28, 2017, of a March 17, 2017 incident where an unauthorized individual potentially accessed a database containing patient PII (names, SSNs, health insurance info) and clinical data. 13 NH residents were notified. No evidence of misuse was found. Credit monitoring was offered.

Harrisburg Gastroenterology Ltd. notified patients of a potential unauthorized access to patient information discovered on March 17, 2017. Data potentially exposed included names, demographics, SSNs, and PHI. No evidence of misuse was found. The company offered one year of Experian IdentityWorks.

Harrisburg Gastroenterology Ltd reported to HHS on 2017-04-28 a ransomware attack affecting 93,323 individuals. Breached information located on Network Server. The attack involved credential compromise leading to data encryption and exfiltration of PHI including SSNs and clinical data. Corrective actions included password resets, firewall replacement, and access control reviews.

Harrisburg Endoscopy and Surgery Center reported to HHS on 2017-04-28 a Hacking/IT Incident affecting 9,092 individuals. Breached information located on Network Server. The incident involved ransomware where an unauthorized party obtained credentials to access record systems, encrypting data and exfiltrating PHI including demographic, clinical, health insurance, and SSN data.

Harrisburg Gastroenterology Ltd and Harrisburg Endoscopy and Surgery Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-04-28. 36 Massachusetts residents were affected. The report records the breach type as electronic.