CareNet Medical Group, PC
ent_96b7e8cb9d0cea54213d644d
Disclosures
4
State AG · HHS OCR · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
10,059
nationwide · HHS OCR NY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CareNet Medical Group, PC
- Normalized
- carenet medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Massachusetts State AGas victim2023-06-02
CareNet Medical Group, PC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-02. 6 Massachusetts residents were affected. The report records the breach type as electronic.
- NEW YORKHHS OCRas victim2023-06-02
CareNet Medical Group, PC reported to HHS on 2023-06-02 a Hacking/IT Incident affecting 10,059 individuals. Breached information located on Network Server. The incident involved a ransomware attack that encrypted and exposed PHI, including names, DOB, SSN, and driver's license numbers. The entity notified HHS, individuals, and media, and implemented additional administrative, technical, and security safeguards.
- Vermont State AGas victim2023-06-02
CareNet Medical Group PC notified Vermont AG of a breach where unauthorized actors accessed the network between May 9 and June 4, 2022. Files containing PHI were removed. CMG engaged outside cybersecurity professionals, contained the threat, and implemented MFA, password resets, and enhanced monitoring. No indication of misuse was found. Affected count not disclosed.
- Illinois State AGas victim2023-01-01
CARENET MEDICAL GROUP PC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-373). The register records the breach as discovered on May 9, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.