Uncommon Care, P.A. (NC healthcare provider) reported to HHS OCR that its business associate Bizmatics, Inc. suffered a hacking incident resulting in potential unauthorized access to electronic medical records on Bizmatics' servers. 13,674 individuals were affected; data exposed included names, addresses, DOBs, SSNs, diagnoses, test results, medications, and other treatment information. CE notified HHS, individuals, and media; offered one year of free credit monitoring. CE discovered its BA agreement was not fully executed and entered an effective BA agreement on June 7, 2016. OCR closed the matter after assurances of corrective actions.
Affected (this filing): 13,674