Center for Sports Medicine and Orthopedics

Center for Sports Medicine and Orthopedics (CSMO), a Tennessee healthcare provider, reported a breach affecting 800 individuals after its business associate CoPilot was hacked and an unauthorized individual gained access to one of CoPilot's databases. ePHI involved included names, dates of birth, addresses, phone numbers, health insurance information, and Social Security numbers. CoPilot notified the media and affected individuals, added technical and physical safeguards, migrated ePHI to a new server, and retrained staff. OCR obtained assurances of corrective action.