On June 17, 2016, Allergy, Asthma & Immunology of the Rockies, PC (Colorado) discovered its network server had been hacked with evidence of ransomware and unknown accounts on the system. ePHI of up to 6,851 individuals—including demographic, financial, and clinical information—was compromised. The CE replaced the infected hard drive, rebuilt its system, and implemented a VPN. OCR's investigation led to revised ePHI safeguarding procedures, updated risk analysis, and risk management plan improvements.
Affected (this filing): 6,851