norm: morton medical centerno LEI · no CIKMax severity: Medium

Canonical registry

Morton Medical Center, PLLC

ent_51c379a83ef2fed515ba8fa4

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

3,000

as filed · HHS OCR WA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Morton Medical Center, PLLC
Normalized: morton medical center— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

WASHINGTONHHS OCRas victim2016-03-24
Morton Medical Center, PLLC (WA) reported to HHS OCR on 2016-03-24 a Hacking/IT Incident affecting 3,000 individuals. A ransomware virus introduced via an internet "add-on" encrypted merge documents and held ePHI for ransom on Desktop Computer and Network Server. The ransom was paid and ePHI was released; no confirmed exfiltration or unauthorized access to ePHI was found. Potentially exposed data included names, addresses, demographics, and some diagnostic information. The CE subsequently overhauled its IT systems, retrained staff, and implemented new access policies. OCR provided technical assistance.