Lawrence General Hospital

Lawrence General Hospital (MA) reported to HHS OCR that a business associate suffered a cyberattack (Hacking/IT Incident on a network server) affecting PHI of 76,571 individuals. Compromised data included names, addresses, Social Security numbers, dates of birth, and financial and treatment information. The hospital notified HHS, affected individuals, and the media, and offered complimentary credit monitoring. The business associate is not named in the OCR portal entry.

Lawrence General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-05. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Lawrence General Hospital reported to HHS on 2020-11-05 a Hacking/IT Incident affecting 176,587 individuals. Breached information located on Network Server. The incident involved a ransomware attack exposing ePHI including names, clinical info, and SSNs.

Lawrence General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-06-24. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Lawrence General Hospital (Lawrence, MA) reported to HHS OCR on 2015-08-05 a Loss affecting 2,071 individuals. A portable thumb drive containing patient names, laboratory testing codes, and slide identification numbers went missing following a theft in the hospital laboratory. The drive was unencrypted and not password-protected. The CE notified HHS, affected individuals, and the media. Remediation included disabling unencrypted USB thumb drive use and implementing new media-receipt monitoring procedures. OCR obtained assurances of corrective action completion.