New Jersey Spine Center (NJ) reported to HHS OCR on 2016-09-22 a Hacking/IT Incident affecting approximately 28,000 individuals. A ransomware virus attacked the CE's computer system, encrypting ePHI files and damaging the network OS, rendering all files unusable. ePHI included demographic and clinical information. The hacker gained access via a username/password. Breached information was located on Electronic Medical Record and Network Server. The CE notified HHS, affected individuals, and media, and provided free credit monitoring. Corrective actions and a remediation plan were required by OCR.
Affected (this filing): 28,000