Gastroenterology Consultants, PA

Gastroenterology Consultants P.A., a healthcare provider based in Houston, Texas, experienced an external system breach on January 10, 2021. The breach, discovered the same day, affected 162,163 individuals, including one Maine resident. Compromised data included names and Social Security numbers. The organization began notifying affected individuals on August 6, 2021, and offered 12 months of complimentary credit monitoring and identity theft restoration services.

Gastroenterology Consultants, P.A. notified Montana residents of a January 10, 2021 ransomware incident. The attack resulted in potential exfiltration of patient PII and PHI (name, address, health info). The organization engaged forensic investigators, deployed endpoint monitoring, and issued notifications to all patients due to the scope of the investigation.

Gastroenterology Consultants P.A. reported an external system breach (hacking) occurring on January 10, 2021, affecting 162,163 individuals, including 1 Maine resident. The breach compromised names and Social Security Numbers. The entity notified affected individuals in writing on August 6, 2021, and provided 12 months of credit monitoring and identity theft restoration services through IDX.

Gastroenterology Consultants P.A. reported an external system breach that was discovered on January 10, 2021. The breach, which also occurred on the same day, affected one Maine resident. The compromised information includes names and driver's license or non-driver identification card numbers. The company offered 12 months of credit monitoring and identity theft protection services to the affected individual.

Gastroenterology Consultants, PA reported to HHS on 2021-03-19 a Hacking/IT Incident affecting 161,698 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including names, addresses, DOBs, diagnoses, lab results, and SSNs.

Gastroenterology Consultants Ltd (NV) reported to HHS on 2021-01-06 a ransomware attack affecting 2,500 individuals' ePHI stored on a Network Server. Exposed data included names, addresses, dates of birth, driver's license numbers, Social Security numbers, lab results, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media, offered credit monitoring, strengthened technical safeguards, and retrained staff.