Barlow Respiratory Hospital

Barlow Respiratory Hospital experienced a data breach from August 21, 2021, to September 1, 2021, where an unauthorized party accessed systems and exfiltrated files containing employee and physician data. Affected information included names, SSNs, driver's license numbers, financial account info, online credentials, and medical/health insurance data. The hospital engaged forensic investigators, notified law enforcement, and offered 12 months of credit monitoring.

Barlow Respiratory Hospital (CA) reported to HHS on 2021-12-30 a ransomware attack affecting 10,761 individuals. Breached PHI resided on a Network Server and included names, addresses, dates of birth, driver's license numbers, Social Security numbers, medical record numbers, diagnoses, financial information, and health insurance/treatment information. The CE notified HHS, affected individuals, and the media, offered credit monitoring, and implemented additional technical safeguards. OCR provided technical assistance under the HIPAA Rules during the investigation.

Barlow Respiratory Hospital notified California AG that unauthorized access occurred between August 21 and September 1, 2021. An unauthorized party accessed systems and exfiltrated patient files containing PII, PHI, and financial data. The breach was discovered on August 27, 2021. The hospital engaged forensic investigators, notified law enforcement, and offered credit monitoring services to affected individuals.