Country Doctor Community Health Clinic

Country Doctor Community Health Clinic notified the NH AG of a Jan 6, 2022 incident where an unauthorized actor accessed systems containing PHI and PII (names, DOB, SSN, MRN) of 3 NH residents. Notifications sent Oct 14, 2022. No evidence of misuse. Remediation included technical security measures and 12 months credit monitoring.

Country Doctor Community Health Clinic reported a data breach to the Montana Attorney General. The breach was reported on 2022-10-19. The breach occurred on 1/6/2022. 18 Montana residents were affected.

Country Doctor Community Health Clinic reported a data breach to the Maine Attorney General, stating that on October 14, 2022, an external system breach (hacking) occurred. The breach was also discovered on the same day. The personal information of 3 Maine residents was compromised, including their names and Social Security numbers. The company offered 12 months of credit monitoring services through IDX to the affected individuals.

Country Doctor Community Health Clinic, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2022-01-06 and filed notice on 2022-10-19. 21,600 Washington residents were affected. 286 days elapsed between awareness and notification. -281 days to identify the breach. 281 days to contain the breach.

Country Doctor Community Health Clinic (WA) reported to HHS OCR on 2022-09-16 a ransomware attack (Hacking/IT Incident) affecting 22,120 individuals. PHI on a network server was compromised, including names, dates of birth, addresses, Social Security numbers, medical record numbers, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media, posted a substitute notice, provided credit monitoring, and implemented additional technical safeguards. No business associate was involved.