LA CLINICA DE LA RAZA, INC.

La Clinica de La Raza, Inc. reported a data security incident involving malware deployment on systems storing patient information. Unauthorized access occurred on January 12, 2021, affecting patient names, DOBs, addresses, health insurance info, and health records. The incident was discovered on January 28, 2021. La Clinica disconnected affected systems, engaged forensic investigators, and notified federal law enforcement. Remediation included enhanced security measures and workforce training.

The covered entity (CE), La Clinica de La Raza, reported that its business associate suffered a cyber-attack affecting the protected health information (PHI) of 31,132 individuals. The PHI involved included names, addresses, dates of birth, diagnoses and conditions, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach the BA implemented additional administrative and technical safeguards.

Affected (this filing): 31,132