American Anesthesiology, Inc.

North American Partners in Anesthesia (NAPA) notified the New Hampshire Attorney General of a security incident involving its business associate, MEDNAX Services, Inc. An unauthorized party accessed MEDNAX's Microsoft Office 365 email system between June 17 and June 22, 2020, via phishing. The attacker attempted payroll fraud but was unsuccessful. Patient and guarantor information (names, SSNs, health insurance details, medical records) was stored in compromised accounts. 109 New Hampshire residents were affected. NAPA offered one year of credit monitoring. The incident was contained by resetting passwords and adding authentication requirements.

North American Partners in Anesthesia reported a security incident involving its business associate, MEDNAX Services, Inc. An unauthorized party accessed American Anesthesiology email accounts via phishing between June 17-22, 2020. The incident exposed patient PII, PHI, SSNs, and financial data for 505 Washington residents. Remediation included password resets, system migration, and MFA implementation.