Brandywine Counseling & Community Services, Inc

Brandywine Counseling & Community Services, Inc. (DE) reported to HHS OCR on 2020-07-17 an Unauthorized Access/Disclosure affecting 4,139 individuals. The covered entity's business associate impermissibly mailed PHI — including names and treatment information — to wrong recipients due to processing errors. Breached information was located in Paper/Films. The CE revised its policies and procedures as corrective action; OCR obtained assurances of implementation.

Brandywine Counseling & Community Services, Inc. notified the NH Attorney General of a ransomware incident discovered on Feb 10, 2020. The breach affected 2 NH residents, exposing PHI, SSNs, and DOB. Notifications began May 13, 2020. Response included forensic investigation, law enforcement notification, and credit monitoring services.

Brandywine Counseling & Community Services, Inc. (DE) reported to HHS on 2020-04-10 a ransomware attack affecting ePHI on a Network Server for 11,852 individuals. Exposed data included names, addresses, Social Security numbers, dates of birth, drivers' license numbers, diagnoses, conditions, financial information, and other medical/treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. Additional technical and security safeguards were implemented.

Brandywine Counseling & Community Services, Inc. (BCCS), a Delaware nonprofit healthcare provider, disclosed a ransomware incident discovered on February 10, 2020. The attack affected 3,022 Delaware residents, exposing names, dates of birth, health insurance info, limited clinical treatment data, and for 2,805 individuals, Social Security numbers and/or driver's license numbers. BCCS engaged forensic investigators and law enforcement, secured the network, and began notifying affected individuals on April 10, 2020, offering one year of credit monitoring via Kroll.