St. John's Well Child and Family Center Inc.

St. John's Well Child and Family Center, Inc. reported to HHS on 2021-04-29 a Hacking/IT Incident affecting 29,030 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI including names, addresses, DOB, SSNs, claims, and diagnoses. The entity implemented new administrative and technical safeguards following OCR's investigation.

Affected (this filing): 29,030

St. John's Well Child and Family Center experienced a data security incident on February 3, 2021, disrupting access to certain systems. An investigation revealed that personal or health information may have been accessed or acquired without authorization. The organization secured its network, engaged cybersecurity experts, notified the FBI, and implemented enhanced security measures. Affected individuals were notified in late April 2021.