Solara Medical Supplies

Solara Medical Supplies, LLC reported a data breach affecting employee Office 365 accounts from April 2, 2019, to June 20, 2019. An unknown actor gained access via a phishing email campaign. The incident involved the potential access to employee and minor child personal information, including names, addresses, and government IDs. Solara engaged forensic experts, reset passwords, notified law enforcement and regulators, and offered 12 months of identity monitoring through Kroll.

Solara Medical Supplies, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2019-11-13. The breach occurred from 4/2/2019 to 6/20/2019. 351 Montana residents were affected.

Affected (this filing): 351

Solara Medical Supplies, LLC reported to HHS on 2019-11-13 a Hacking/IT Incident affecting 114007 individuals. Breached information located on Email. A phishing attack gained access to employee email accounts between April and June 2019, resulting in the breach of ePHI for 114,007 individuals. Solara settled with OCR for $3,000,000 and agreed to a corrective action plan.

Affected (this filing): 114,007

Solara Medical Supplies, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2019-11-13. 114,227 individuals were affected.

Affected (this filing): 114,227

Solara Medical Supplies, LLC (CA) reported to HHS OCR on 2020-01-17 an Unauthorized Access/Disclosure affecting 1,531 individuals, arising from a second breach: breach notification letters were mailed to wrong addresses. A related phishing attack (April–June 2019) compromised eight employee email accounts exposing 114,007 individuals' ePHI. Breached information located on Paper/Films. OCR investigation found failures in risk analysis, security measures, and timely breach notification. Solara paid $3,000,000 and agreed to a two-year corrective action plan.