WASHINGTONHHS OCRFirst filing
Filed Mar 24, 2016bd_a9b56069e327f186
Morton Medical Center, PLLC (WA) reported to HHS OCR on 2016-03-24 a Hacking/IT Incident affecting 3,000 individuals. A ransomware virus introduced via an internet "add-on" encrypted merge documents and held ePHI for ransom on Desktop Computer and Network Server. The ransom was paid and ePHI was released; no confirmed exfiltration or unauthorized access to ePHI was found. Potentially exposed data included names, addresses, demographics, and some diagnostic information. The CE subsequently overhauled its IT systems, retrained staff, and implemented new access policies. OCR provided technical assistance.
Affected (this filing): 3,000
HHS notified