Fairfax Oral and Maxillofacial Surgery

Fairfax Oral and Maxillofacial Surgery reported a supplemental data security incident to the New Hampshire Attorney General on October 12, 2023. The incident, occurring May 15-16, 2023, involved ransomware encryption of systems. No evidence of data acquisition was found, but patient PII (names, SSNs, driver's licenses, health info) was on encrypted systems. 33 NH residents were notified. FOMS engaged law enforcement and forensic investigators.

Fairfax Oral and Maxillofacial Surgery experienced an external system breach (hacking) on 05/15/2023, discovered on 09/14/2023. The incident affected 235,931 individuals, including 33 in Maine. Driver's license numbers and names were compromised. The entity provided written notification and 12 months of Experian Credit3B identity theft protection services.

Fairfax Oral and Maxillofacial Surgery (FOMS) reported a data breach that occurred on May 15, 2023. The breach, discovered on July 11, 2023, was an external system breach (hacking) that affected 31 Maine residents. The compromised information included names in combination with driver's license or other non-driver identification card numbers. FOMS began notifying affected individuals in writing between August 18 and August 21, 2023, and offered 12 months of credit monitoring services through Experian.

Fairfax Oral and Maxillofacial Surgery reported a ransomware incident to the New Hampshire Attorney General on August 22, 2023. The incident occurred on May 16, 2023, resulting in file encryption. 26 New Hampshire residents were notified. No evidence of data acquisition was found, but credit monitoring was offered.

Fairfax Oral and Maxillofacial Surgery reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-22. The breach occurred on 5/16/2023. 17 Montana residents were affected.

Fairfax Oral and Maxillofacial Surgery reported to HHS on 2023-07-14 a Hacking/IT Incident affecting 235,931 individuals. Breached information located on Network Server. The incident involved names, addresses, DOB, driver's license numbers, diagnoses, health insurance info, medical history, and SSNs. The CE provided complimentary credit monitoring and implemented additional administrative, technical, and security safeguards.