Solara Medical Supplies

HHS OCR settled a HIPAA investigation with Solara Medical Supplies, LLC for $3,000,000 regarding a 2019 phishing breach affecting 114,007 individuals' ePHI and a subsequent notification error. Solara failed to conduct risk analyses, implement adequate security measures, and provide timely breach notifications.

Solara Medical Supplies, LLC (CA) reported to HHS OCR on 2020-01-17 an Unauthorized Access/Disclosure affecting 1,531 individuals, arising from a second breach: breach notification letters were mailed to wrong addresses. A related phishing attack (April–June 2019) compromised eight employee email accounts exposing 114,007 individuals' ePHI. Breached information located on Paper/Films. OCR investigation found failures in risk analysis, security measures, and timely breach notification. Solara paid $3,000,000 and agreed to a two-year corrective action plan.

SOLARA MEICAL SUPPLIES filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-014). The register records the breach as discovered on November 13, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Solara Medical Supplies, LLC notified the New Hampshire Attorney General of a data event affecting 12 NH residents. An unknown actor accessed employee Office 365 accounts via a phishing campaign between April 2 and June 20, 2019. Solara discovered the breach on June 28, 2019, and notified law enforcement and regulators. Affected data included names, SSNs, Medicare/Medicaid IDs, and financial info. Solara offered 12 months of credit monitoring through Kroll.

Solara Medical Supplies, LLC notified individuals of a phishing incident where unknown actors accessed employee Office 365 accounts between April 2 and June 20, 2019. Solara discovered the incident on June 28, 2019. Personal information of employees and customers was potentially accessed. Solara reset passwords, engaged forensic experts, notified law enforcement, and offered 12 months of identity monitoring.

Solara Medical Supplies, LLC notified Washington AG of a phishing incident affecting employee Office 365 accounts from April 2 to June 20, 2019. Discovered June 28, 2019. 138 Washington residents affected. Data included names, SSNs, financial accounts, driver's licenses, and Medicare/Medicaid IDs. Solara engaged forensic experts, reset passwords, notified law enforcement, and offered 12 months of credit monitoring via Kroll.

Solara Medical Supplies, LLC experienced a data breach resulting from a phishing email campaign that compromised employee Office 365 accounts between April 2, 2019, and June 20, 2019. The incident was discovered on June 28, 2019. Affected data included names, addresses, dates of birth, Social Security numbers, medical information, health insurance details, financial information, and credentials for patients, employees, and minors. Solara engaged forensic experts, reset passwords, notified law enforcement and regulators, and offered 12 months of identity monitoring through Kroll.

Solara Medical Supplies, LLC notified affected individuals of a phishing incident compromising employee Office 365 accounts between April 2 and June 20, 2019. The breach exposed personal information including names, SSNs, DOBs, medical/financial data, and credentials for patients, employees, and minors. Solara engaged forensic experts, reset passwords, notified law enforcement, and offered 12 months of credit monitoring.

Solara Medical Supplies, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-11-13. 31 Massachusetts residents were affected. The report records the breach type as electronic.

Solara Medical Supplies, LLC reported to HHS on 2019-11-13 a Hacking/IT Incident affecting 114007 individuals. Breached information located on Email. A phishing attack gained access to employee email accounts between April and June 2019, resulting in the breach of ePHI for 114,007 individuals. Solara settled with OCR for $3,000,000 and agreed to a corrective action plan.

Solara Medical Supplies, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2019-11-13. 114,227 individuals were affected.

SOLARA MEDICAL SUPPLIES, LLC filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-449). The register records the breach as discovered on April 2, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.