Siouxland Anesthesiology, Ltd. (SD) reported to HHS OCR on 2015-07-31 a Hacking/IT Incident affecting approximately 13,000 individuals. Hackers infiltrated a network server and installed malware, leaving patients' ePHI vulnerable. Exposed data included names, addresses, dates of birth, and in some cases Social Security numbers. The CE replaced the compromised server, secured workstations, updated password management, and provided credit monitoring to affected individuals. OCR provided technical assistance on risk analysis and policy improvements.
Affected (this filing): 13,000