Pacific Alliance Medical Center

Pacific Alliance Medical Center Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-08-28. 21 Massachusetts residents were affected. The report records the breach type as electronic.

Pacific Alliance Medical Center experienced a ransomware attack on June 14, 2017, which encrypted files on its networked computer systems. The incident potentially exposed personal information including names, demographic data, dates of birth, Social Security numbers, and employment information. The organization shut down systems, notified the FBI and relevant health regulators, and engaged forensic investigators. No evidence of unauthorized access to personal data was found, but notification was issued as a precaution. Two years of identity theft protection via Experian was offered to affected individuals.

Pacific Alliance Medical Center (CA) reported to HHS OCR on 2017-08-10 a Hacking/IT Incident (malware/ransomware attack) affecting 266,123 individuals. Breached information was located on a Network Server. PHI exposed included names, dates of birth, addresses, Social Security numbers, driver's license information, claims information, diagnoses, medications, lab results, and medical images. The CE notified HHS, affected individuals, and the media. Following OCR's investigation, the CE strengthened administrative and technical safeguards to enhance protection of PHI.