Moorestown Visiting Nurse Association

The covered entity (CE), Moorestown Visiting Nurse Association, reported that its business associate (BA) experienced a ransomware attack affecting the protected health information (PHI) of 26,465 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, patient identification numbers, and medical records. The CE notified HHS, affected individuals, and the media. In response to the breach, both the CE and BA implemented additional technical safeguards to better protect PHI.

Moorestown Visiting Nurse Association (MVNA) notified patients of a data security incident involving its vendor, Crossroads Technologies. A ransomware attack occurred on November 29, 2019. On March 19, 2020, the vendor confirmed the patient database was accessible. Data potentially exposed included names, addresses, DOBs, SSNs, and medical records. MVNA engaged cybersecurity experts and offered one year of complimentary identity monitoring via Kroll.

Moorestown Visiting Nurse Association reported a data breach to the Indiana Attorney General. The breach occurred on 2019-11-29 and was reported on 2020-05-07. 5 Indiana residents were affected. 26,465 individuals affected in total.

Moorestown Visiting Nurse Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-05-07. 10 Massachusetts residents were affected. The report records the breach type as electronic.

MOORESTOWN VISTING NURSE ASSOCIATION filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-193). The register records the breach as discovered on November 29, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.