On March 19, 2013, M&C Children's Clinic PA reported a data breach to HHS affecting 6,300 individuals. The breach was a result of a hacking incident where an attacker encrypted patient electronic medical records on a network server and demanded a ransom. The compromised information included patients' clinical, financial, and demographic data. In response, the clinic enhanced its security with new firewalls and antivirus software, revised its data backup and recovery plans, and provided additional staff training.
Affected (this filing): 6,300