AZHHS OCRFirst filing
Filed Mar 6, 2019bd_3305fcc273c2906f
On September 11, 2018, Maffi Clinics (AZ) was the victim of a ransomware attack on its network server affecting 10,465 patients' clinical and demographic information. Maffi promptly terminated the unauthorized access point, isolated and removed the ransomware, and restored all data. No evidence was found that data was viewed or downloaded. Patient notifications were sent on February 14, 2019. OCR closed its investigation after determining Maffi is not a HIPAA covered entity or business associate.
Affected (this filing): 10,465
HIPAA 60-day late · 156dHHS notified · 156d