Mat-Su Surgical Associates, APC

Mat-Su Surgical Associates, APC suffered a ransomware incident on March 16, 2020, encrypting files and allowing an unauthorized actor to view patient records. Glacier Surgical Associates, a former provider at the facility, notified one New Hampshire resident whose PHI, SSN, and DOB were potentially exposed. Notices were sent on August 25, 2020, offering 12 months of identity monitoring.

Mat-Su Surgical Associates, APC experienced a ransomware event on March 16, 2020. Glacier Surgical Associates notified patients treated at Mat-Su between Sept 2014 and April 2018 that their PHI, SSN, and DLs may have been accessed. Forensic investigators were hired. Free credit monitoring offered.

Mat-Su Surgical Associates, APC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-05-27. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mat-Su Surgical Associates, APC suffered a ransomware attack on March 16, 2020, encrypting files and allowing unauthorized access to PHI. Four New Hampshire residents were affected. The organization restored systems, hired forensic investigators, reset passwords, and implemented additional remote access controls. Credit monitoring was provided to affected individuals.

Mat‐Su Surgical Associates, APC reported a data breach to the Indiana Attorney General. The breach occurred on 2020-03-16 and was reported on 2020-05-15. 3 Indiana residents were affected. 13,146 individuals affected in total.

Mat-Su Surgical Associates, APC notified Montana residents of a March 16, 2020 ransomware attack that encrypted files and potentially exposed patient PHI, including names, SSNs, and medical records. The company engaged forensic investigators, reset passwords, enhanced remote access controls, and provided 12 months of credit monitoring.

Mat-Su Surgical Associates, APC (AK) reported to HHS on 2020-05-15 a ransomware attack (Hacking/IT Incident) affecting the ePHI of 13,146 individuals on a Network Server. Exposed data included names, addresses, dates of birth, Social Security numbers, diagnoses, medications prescribed, and claims information. The CE notified HHS, affected individuals, and the media, and provided complimentary credit monitoring. Additional technical safeguards were implemented; OCR provided HIPAA Security Rule technical assistance.