MASSACHUSETTSHHS OCRFirst filing
Filed Jun 5, 2013bd_f5329cc0d2a7121d
University of Massachusetts Amherst (UMass) reported to HHS OCR on 2013-06-05 a Hacking/IT Incident affecting 1,670 individuals. A workstation at UMass's Center for Language, Speech, and Hearing was infected with a generic remote access Trojan (RAT), exposing ePHI including names, addresses, SSNs, dates of birth, health insurance information, diagnoses, and procedure codes. UMass lacked a firewall. HHS OCR settled for $650,000 with a corrective action plan. Breached information located on a Desktop Computer.
Affected (this filing): 1,670
HHS notified