Reeve-Woods Eye Center

Reeve-Woods Eye Center (CA) reported to HHS OCR on 2014-11-15 a malware incident affecting 30,000 individuals (the web description references 43,000). Malware infiltrated the CE's electronic network approximately August 1 – September 17, 2014, causing screenshots and keystrokes to be exfiltrated outside the network. ePHI exposed included names, SSNs, dates of birth, addresses, phone numbers, dates of service, insurance information, diagnosis codes, treatment information, and medical histories. The CE cooperated with the FBI, cleared the malware, and strengthened technical security controls. Breached information located on Network Server.

REEVE-WOODS EYE CENTER notified patients of a security breach discovered on September 17, 2014. Unknown individuals breached the clinic's server and installed malware to capture screenshots containing PHI, SSNs, and insurance IDs. The malware was likely installed in August 2014. No evidence of actual misuse was found at the time of notification. Investigation was ongoing.