ILHHS OCRFirst filing
Filed Apr 19, 2017bd_797f1f898fc3cd1d
Valley Women's Health, S.C. (IL) reported to HHS on 2017-04-19 a Hacking/IT Incident affecting 5,155 individuals. On Feb 17–18, 2017, attackers impersonating eClinicalWorks support staff used vishing calls to obtain remote access credentials. On Feb 20, EHR data was encrypted via ransomware. PHI exposed included names, dates of birth, addresses, SSNs, diagnoses, lab results, and medications (~4,903 individuals per description). The CE notified HHS, media, and the FBI, and implemented corrective measures confirmed by OCR. Breached info located on Electronic Medical Record and Network Server.
Affected (this filing): 5,155
HHS notified