Elgon Information Systems
ent_53bd622a94ba73ca8812a600
Disclosures
2
HHS OCR enforcement · HHS OCR · 2 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
31,248
nationwide · HHS OCR MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Elgon Information Systems
- Normalized
- elgon information— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- FEDERALHHS OCR enforcementas victim2025-01-07
HHS OCR settled with Elgon Information Systems for $80,000 regarding a 2023 ransomware attack. Elgon, a business associate providing EMR services, failed to conduct a required risk analysis. The attack affected approximately 31,248 individuals, exposing PHI including demographic and clinical data. Elgon agreed to a corrective action plan including updated risk analysis, workforce training, and policy revisions.
- MASSACHUSETTSHHS OCRas victim2023-06-02
Elgon Information Systems reported to HHS on 2023-06-02 a Hacking/IT Incident affecting 31248 individuals. Breached information located on Network Server. The incident involved a ransomware attack where an unknown actor gained access through open firewall ports. The settlement resolves an investigation concerning the ransomware attack and failure to conduct a risk analysis.