Muir Medical Group, IPA. Inc.

Muir Medical Group, IPA, Inc. reported to HHS on 2018-05-22 a Unauthorized Access/Disclosure affecting 5485 individuals. Breached information located on Network Server. An employee impermissibly accessed and copied client electronic data, including demographic, insurance, and clinical PHI. The BA notified HHS, patients, and media, offered identity theft protection, contacted law enforcement, engaged a digital forensics firm, and retrained staff.

Affected (this filing): 5,485

Muir Medical Group, IPA, Inc. notified California regulators of a data breach involving a former employee who took patient information before her employment ended in December 2017. The incident, discovered in March 2018, exposed demographic data, SSNs, insurance details, and clinical records. The company engaged forensic investigators and offered one year of identity monitoring via Kroll to affected individuals.