Centrelake Medical Group, Inc.

Centrelake Medical Group, Inc., a subsidiary of AltaMed Health Services Corporation, reported a ransomware incident affecting patient records. The breach occurred between January 9, 2019, and February 19, 2019, when a virus prohibited access to files containing PHI and PII (SSN, driver's licenses). No evidence of actual data misuse was found, but unauthorized access was possible. The company engaged third-party forensics, restored systems, and offered credit monitoring.

Centrelake Medical Group reported a data breach to the Montana Attorney General. The breach was reported on 2019-04-16. The breach occurred from 1/9/2019 to 2/19/2019. 8 Montana residents were affected.

Centrelake Medical Group, Inc. reported to HHS on 2019-04-16 a Hacking/IT Incident affecting 197,661 individuals. Breached information located on Network Server. The incident involved ransomware encrypting PHI (names, addresses, SSN, driver's license, diagnoses, treatment). The entity provided credit monitoring and identity restoration services and implemented additional security safeguards.

Centrelake Medical Group, Inc. disclosed a ransomware incident affecting 195,144 California residents. The attack occurred between January 9, 2019, and February 19, 2019, when an unknown third party infected servers with a virus that prohibited access to patient files. Compromised data included names, SSNs, driver's licenses, and PHI. Centrelake engaged forensic investigators, restored systems, and offered one year of identity monitoring via Kroll.