CareNet Medical Group, PC

CareNet Medical Group, PC reported to HHS on 2023-06-02 a Hacking/IT Incident affecting 10,059 individuals. Breached information located on Network Server. The incident involved a ransomware attack that encrypted and exposed PHI, including names, DOB, SSN, and driver's license numbers. The entity notified HHS, individuals, and media, and implemented additional administrative, technical, and security safeguards.

Affected (this filing): 10,059

CareNet Medical Group PC notified Vermont AG of a breach where unauthorized actors accessed the network between May 9 and June 4, 2022. Files containing PHI were removed. CMG engaged outside cybersecurity professionals, contained the threat, and implemented MFA, password resets, and enhanced monitoring. No indication of misuse was found. Affected count not disclosed.