norm: guam memorial hospital authorityUSno LEI · no CIKMax severity: Low

Canonical registry

Guam Memorial Hospital Authority

ent_e390c30692ec234c4c2981c5

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR enforcement · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Guam Memorial Hospital Authority
Normalized: guam memorial hospital authority— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

FEDERALHHS OCR enforcementas victim2025-04-17
HHS OCR settled a HIPAA investigation with Guam Memorial Hospital Authority (GMHA) for $25,000. The settlement addresses a December 2018 ransomware attack affecting ~5,000 individuals' ePHI and a March 2023 incident involving former employees accessing systems after termination. GMHA failed to conduct a thorough risk assessment. The agreement includes a Corrective Action Plan requiring risk analysis, risk management, policy updates, training, and breach assessments.