Tarleton Medical

Tarleton Medical experienced an unauthorized access incident affecting patient medical records. On January 6, 2017, the organization learned of the incident and disabled server access. A forensic investigation confirmed unauthorized access to computer systems and potential access to patient records containing names, addresses, dates of birth, Social Security numbers, and health care claims information. The company engaged a digital forensics firm, notified the FBI, and offered 12 months of credit and identity monitoring to affected individuals.

Tarleton Medical (CA, Healthcare Provider) reported to HHS on 2017-03-06 a Hacking/IT Incident affecting 3,929 individuals. The CE was the victim of a malware/ransomware attack on its network server. Breached ePHI included names, dates of birth, addresses, social security numbers, and health care claims information. Following the breach, the CE implemented stronger passwords, encrypted all computers, and enhanced firewall and antivirus protections. OCR's investigation resulted in further safeguard enhancements.