Watsonville Chiropractic, Inc.

Watsonville Chiropractic, Inc. reported a data breach involving its billing software provider's Amazon S3 storage account. The account was vulnerable and accessible to unauthorized parties from May 2016 to September 11, 2016. A security researcher accessed and downloaded patient data, including names, addresses, SSNs, and protected health information. The provider secured the account, and the researcher deleted the data. Watsonville notified affected individuals and regulators, offering credit monitoring via Equifax.

Watsonville Chiropractic, Inc. reported to HHS on 2016-11-17 an Unauthorized Access/Disclosure affecting 829 individuals. Breached information was located on a Network Server. The covered entity was notified by its business associate, EMR4all, that its storage account was misconfigured and accessible to unauthorized external persons. PHI exposed included names, addresses, dates of birth, Social Security numbers, and treatment information. Affected individuals were notified, offered one year of credit monitoring, and a toll-free assistance line was established. The CE has since ceased operations.