St. Mark's Surgical Center, LLC (FL) reported to HHS on 2017-08-09 a ransomware attack on its network server affecting 33,877 individuals. PHI exposed included patients' names, addresses, dates of birth, driver's licenses, Social Security information, diagnoses and conditions, lab results, and medications. The CE notified HHS, affected individuals, and media; contacted law enforcement; and hired forensic investigators. Post-breach remediation included firewall upgrades, hardened access controls, improved backup/DR, restricted remote access, strengthened passwords, and HIPAA policy revisions.
Affected (this filing): 33,877