Hanger Prosthetics and Orthotics

Hanger Prosthetics & Orthotics (dba Hanger Clinic) reported a HIPAA breach after an employee of its business associate was the subject of an email phishing attack that compromised PHI of 1,354 individuals. Exposed data included names, addresses, dates of birth, SSNs, driver's license numbers, claims information, diagnoses, and other treatment information. Hanger notified HHS, affected individuals, and the media, implemented new technical safeguards, and retrained its workforce on email security.

Hanger Prosthetics & Orthotics, Inc. d/b/a Hanger Clinic reported to HHS on 2020-05-29 a Unauthorized Access/Disclosure affecting 6033 individuals. Breached information located on Paper/Films. Employees improperly disposed of documents containing PHI including names, DOB, addresses, SSNs, and treatment info.

An unencrypted laptop was stolen from an employee offsite. The laptop contained the PHI of 4,486 patients, including names, addresses, and procedure codes. The covered entity filed a police report, notified affected patients and the media, encrypted all existing laptops, and implemented a policy requiring future laptops to be encrypted before issuance.

Hanger Orthopedic Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-11-15. 28 Massachusetts residents were affected. The report records the breach type as electronic.