Verity Medical Foundation

Verity Medical Foundation (CA) reported to HHS on 2017-01-11 a Hacking/IT Incident affecting 10,164 individuals. One of its websites (www.sanjosemed.com) was compromised and used to distribute malware to visitors. Affected individuals were patients of San Jose Medical Group (joined 2017). PHI involved: names, addresses, dates of birth, medical record numbers, and last 4 digits of credit card numbers. Breached information located on Network Server. Website was immediately disabled upon discovery; notifications sent to HHS, individuals, and media. OCR obtained corrective-action assurances.

Affected (this filing): 10,164

Verity Medical Foundation notified California AG of unauthorized access to a decommissioned website (Oct 2015–Jan 2017). Patient data exposed: names, DOBs, MRNs, contact info, partial credit card digits. No SSNs or full card numbers. No misuse known. Remediation: credit monitoring via Equifax.