Synergy Specialists Medical Group

Synergy Specialists Medical Group, Inc reported to HHS on 2017-01-27 a Hacking/IT Incident affecting 569 individuals. Breached information located on Email. An employee opened a phishing email, compromising the account and causing false emails to patients. 71 patient names and email addresses were impermissibly disclosed due to failure to BCC.

Synergy Specialists Medical Group, Inc. experienced a data breach involving its Gmail account. On December 9, 2016, the organization discovered that an unauthorized party had sent fraudulent emails to patients, appearing to be from the office regarding a 'Docusign' document. The breach window is listed as December 5-9, 2016. Affected data potentially includes patient registration forms, prescription/lab requests, voicemail transcriptions, and the email recipient list containing names and email addresses. The organization secured the account, hired forensic specialists, and is migrating to a new email system. No evidence of identity theft was found, but credit monitoring was offered.

Synergy Specialists Medical Group notified patients of a phishing incident on Dec 9, 2016 where a fraudulent DocuSign email was sent from their compromised Gmail account. Exposed data included patient names, email addresses, and PHI from emails sent to the office. The company secured the account, hired forensic specialists, and offered one year of Equifax credit monitoring.

Synergy Specialists Medical Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-01-25. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Synergy Specialists Medical Group, Inc. experienced a data breach on December 9, 2016, when an unauthorized party accessed their Gmail account and sent fraudulent DocuSign emails to patients. The incident potentially exposed patient names, email addresses, and health-related information such as prescription requests and voicemail transcriptions. One New Hampshire resident was affected. The organization secured the account, engaged forensic specialists, and notified regulators including the FBI and HHS. Remediation included migrating to a new email system and implementing additional administrative safeguards.