Medical Oncology Hematology Consultants, PA (Delaware) reported to HHS on 2017-08-29 a ransomware attack that occurred on June 17, 2017, affecting 19,203 individuals' ePHI stored on desktop computers and a network server. Affected files included demographic and clinical information. The CE recovered all ePHI from a same-day backup. Remediation included third-party forensic review, email phishing testing, employee security training, web filtering, and two-factor authentication. No improper use or exfiltration of ePHI was identified. OCR confirmed corrective actions were implemented.
Affected (this filing): 19,203