University of Mississippi Medical Center

University of Mississippi Medical Center (MS) reported to HHS OCR on 2017-07-07 a Hacking/IT Incident affecting 7,492 individuals. On May 7, 2017, ransomware encrypted data on a segregated network server containing records from a legacy electronic medical record system last used ~May 2016. Affected data included demographic, clinical, and health insurance information. The CE was under an active OCR Corrective Action Plan at the time; it revised security policies, conducted an enterprise-wide risk analysis, and fulfilled all notification obligations. Breached info located on Electronic Medical Record and Network Server.

Affected (this filing): 7,492