norm: the oregon clinic pc the oregon clinicno LEI · no CIKMax severity: Medium

Canonical registry

The Oregon Clinic, P.C. ("The Oregon Clinic")

ent_cc6b96be1c0fdd3c3f87fc17

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

64,487

as filed · HHS OCR OR

Leak-site claims

0

none in sample

Identity resolution

Canonical name: The Oregon Clinic, P.C. ("The Oregon Clinic")
Normalized: the oregon clinic pc the oregon clinic— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

OREGONHHS OCRas victim2018-05-08
On March 9, 2018, The Oregon Clinic, P.C. (OR) discovered that an unauthorized third party accessed an employee email account via a phishing attack, exposing ePHI (demographic and clinical information) of 64,487 individuals. Breached information located on Email. The CE notified HHS, affected individuals, and media, posted substitute notice, revised policies and procedures, and implemented MFA for its EHR system. OCR obtained assurances of corrective action.