Centrelake Medical Group, Inc.

Centrelake Medical Group, Inc. experienced a malware incident where an unknown third party introduced a virus that encrypted files and prohibited access. Suspicious activity began on January 9, 2019, and was discovered on February 19, 2019. The incident potentially affected protected health information, including names, SSNs, and medical records, of patients in California and other states. The organization engaged third-party forensics, restored systems, and offered identity monitoring services.

Centrelake Medical Group, Inc. notified the NH AG of a data event affecting 6 NH residents. Suspicious activity occurred Jan 9–Feb 19, 2019, introduced by an unknown third party with server access. The incident involved a virus infection on Feb 19, 2019. Data potentially exposed included PHI, SSNs, and driver's licenses. Centrelake engaged forensic experts, restored systems, and offered 1 year of Kroll identity monitoring.

Centrelake Medical Group, Inc. notified patients of a data incident where an unknown third party gained access to servers containing PHI and PII. Suspicious activity occurred from Jan 9, 2019, to Feb 19, 2019, when a virus infected the system. Data types included names, SSNs, driver's licenses, and medical records. No evidence of misuse was found. Kroll provided identity monitoring.

Centrelake Medical Group, Inc. reported to HHS on 2019-04-16 a Hacking/IT Incident affecting 197,661 individuals. Breached information located on Network Server. The incident involved ransomware encrypting PHI (names, addresses, SSN, driver's license, diagnoses, treatment). The entity provided credit monitoring and identity restoration services and implemented additional security safeguards.

Centrelake Medical Group, Inc. discovered on February 19, 2019, that its information system was infected with a virus introduced by an unknown third party. Suspicious activity occurred between January 9, 2019, and February 19, 2019. The incident potentially affected 195,144 California residents, exposing PHI, SSNs, and other PII. The investigation is ongoing. Centrelake is offering one year of identity monitoring.

Centrelake Medical Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-04-16. 11 Massachusetts residents were affected. The report records the breach type as electronic.

CENTRELAKE MEDICAL GROUP, INC filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-183). The register records the breach as discovered on January 9, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.