NJHHS OCRFirst filing
Filed Dec 27, 2012bd_06eec9349d365a22
Sovereign Medical Group, LLC (NJ Healthcare Provider) reported to HHS on 2012-12-27 a Hacking/IT Incident (ransomware) affecting 27,800 individuals. Data files on the network server were corrupted and rendered inaccessible; the CE received a ransom note demanding payment to restore access. ePHI exposed included demographics, SSNs, driver's license numbers, insurance information, dates of service, claims, diagnoses, and procedure codes. The CE notified law enforcement (police, county prosecutor, FBI), offered credit monitoring, and remediated by closing server ports, deploying web filtering, and disabling wireless networks. OCR provided HIPAA Security Rule technical assistance.
Affected (this filing): 27,800
HHS notified