Coastal Cape Fear Eye Associates, P.A.

Coastal Cape Fear Eye Associates, P.A. (NC) reported to HHS OCR on 2018-02-01 a Hacking/IT Incident affecting 925 individuals. On December 5, 2017, a shared drive folder was infected with ransomware delivered via a phishing attack. Exposed PHI included names, addresses, dates of birth, phone numbers, SSNs, insurance, driver's license, Medicare info, email addresses, ethnicities, medical histories, medications, and billing histories. Breached info located on Desktop Computer and Network Server. The CE notified HHS, individuals, and media. Remediation included new hard drives, security updates, firewall resets, backup restoration, workforce retraining, and updated HIPAA policies. The practice closed April 30, 2019.

Affected (this filing): 925