ABCD Pediatrics, P.A. reported to HHS on 2017-03-26 a Hacking/IT Incident affecting 55447 individuals. The breach involved a ransomware attack on its electronic health records system, encrypting protected health information (PHI) stored on a network server. The compromised data included patient names, addresses, dates of birth, Social Security numbers, drivers’ license information, and extensive medical details. In response, the entity closed remote access points, mandated VPN use, and enhanced password and account lockout policies. OCR provided technical assistance to improve the entity's security and notification policies.
Affected (this filing): 55,447