norm: serene sedationno LEI · no CIKMax severity: Medium

Canonical registry

Serene Sedation

ent_574efa3e643adc597bc5f48b

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

5,207

nationwide · HHS OCR MD

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Serene Sedation
Normalized: serene sedation— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

MARYLANDHHS OCRas victim2018-03-14
An unauthorized user accessed the computer network of a business associate (BA) which stored the financial records of Serene Sedation, LLC (CE). The server contained the protected health information (PHI) of approximately 5,207 individuals, including demographic and financial information. Following the breach, the CE discontinued storing financial records on its BA's networks, and increased its own security by adding encryption. OCR reviewed the CE’s risk analysis and BA agreements and obtained assurances that the CE took immediate steps to increase the security of ePHI by encrypting its computer hard drives, encrypting outgoing e-mails, and using a virtual private network (VPN). The CE provided breach notification to HHS, affected individuals, and the media.