Elizabeth L. Brown, MD, PLLC

Elizabeth L. Brown, MD, PLLC reported to HHS on 2017-05-12 a ransomware attack affecting 8,436 individuals. The attack, which occurred around March 14 and March 28, 2017, compromised the entity's billing, scheduling, and electronic medical record systems located on a network server. The breached information included names, addresses, dates of birth, medical details, driver's license and social security numbers, and insurance claim data. In response, the entity investigated with third-party experts, implemented enhanced security measures like unique credentials and revised access levels, and planned to migrate to a cloud-based EMR system. OCR reviewed the entity's risk analysis and corrective actions.