West Hills Hospital & Medical Center (CA) reported to HHS on 2019-08-06 a Hacking/IT Incident affecting 10,650 individuals. Business associate United WestLabs, Inc. notified the CE on June 12, 2019 that its subcontractor, American Medical Collection Agency, suffered unauthorized server access between August 1, 2018 and March 30, 2019. Exposed ePHI included names, addresses, medical account numbers, dates of service, amounts paid, referring doctors' codes, and disposition codes. The CE notified HHS, individuals, and media, and ceased sending collection accounts to the subcontractor. OCR reviewed BA agreements and confirmed corrective actions.
Affected (this filing): 10,650