Plastic Surgery Associates of South Dakota
ent_908d7ef4e469d43104f3048a
Disclosures
3
HHS OCR enforcement · HHS OCR · State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
10,229
nationwide · HHS OCR SD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Plastic Surgery Associates of South Dakota
- Normalized
- plastic surgery associates of south dakota— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- FEDERALHHS OCR enforcementas victim2024-10-31
HHS OCR settled with Plastic Surgery Associates of South Dakota for $500,000 following a 2017 ransomware attack. The breach affected 10,229 individuals via brute force attacks on remote desktop protocol. The settlement addresses failures in risk analysis, security measures, and incident response.
- SOUTH DAKOTAHHS OCRas victim2017-07-27
Plastic Surgery Associates of South Dakota (Sioux Falls, SD) reported to HHS OCR on 2017-07-27 a Hacking/IT Incident affecting 10,229 individuals. Nine workstations and two servers were infected with ransomware. Attackers gained access via a brute force attack against the entity's Remote Desktop Protocol to obtain credentials. Breached information located on Network Server. OCR investigation found multiple HIPAA Security Rule violations; a settlement was reached.
- Montana State AGas victim2017-06-27
Plastic Surgery Associates of South Dakota, Ltd. notified patients of a ransomware incident discovered on February 12, 2017. While unauthorized access was ruled out for most records, the company could not rule out access to a limited number of patient records containing PHI, SSNs, and financial data. The company engaged forensic experts, reported to HHS, and offered one year of credit monitoring.