Doctors Medical Center of Modesto

Doctors Medical Center of Modesto reported to HHS on 2021-04-23 a Unauthorized Access/Disclosure affecting 1259 individuals. Breached information located on Network Server. A business associate employee inadvertently misconfigured a software application, exposing ePHI (names, addresses, emails, DOB, treatment info) over the Internet. The CE terminated the BA relationship and offered identity monitoring.

Doctors Medical Center of Modesto notified patients that a former vendor, Medifies, had misconfigured a software update on a server used by a contractor, potentially exposing patient information (names, addresses, DOB, procedure info) to the internet. The misconfiguration occurred in December 2019 but was discovered on April 2, 2021. The hospital contacted Medifies to remove the data and launched an investigation. Identity monitoring was offered to affected individuals.