SW Seattle Orthopaedic and Sports Medicine

SW Seattle Orthopaedic and Sports Medicine reported to HHS OCR on 2010-10-15 a Hacking/IT Incident affecting 9,493 individuals. A database web server containing EPHI (names, dates of birth, types and dates of x-rays) was breached by an unknown external actor who repurposed the server as a game server. No indication of actual EPHI access was found. The covered entity subsequently relocated servers to a secure data center, removed the exposed Internet access line, and improved administrative safeguards following OCR investigation. Breached information located on Network Server.