norm: warren clinicno LEI · no CIKMax severity: Medium

Canonical registry

Warren Clinic

ent_6cebe1ab346e389cc9df33d2

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

2,938

nationwide · HHS OCR OK

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Warren Clinic
Normalized: warren clinic— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

OKLAHOMAHHS OCRas victim2016-10-07
Warren Clinic (operated by St. Francis Health Systems, OK) reported to HHS on 2016-10-07 a Hacking/IT Incident affecting 2,938 individuals. An unauthorized user deployed ransomware against the clinic's network server and demanded payment to recover patient data. Breached PHI included demographic and clinical information. The CE notified HHS, affected individuals, and the media; provided complimentary identity protection; implemented safeguards; and restricted servers from internet access. OCR obtained assurances of corrective action.