MARYLANDHHS OCRFirst filing
Filed Aug 1, 2017bd_95c5016a7ab7689e
Sport and Spine Rehabilitation reported to HHS on 2017-08-01 a Hacking/IT Incident (ransomware) affecting 31,120 individuals. On June 3, 2017, a cyber attacker accessed the CE's systems via remote access and executed a ransomware attack that encrypted data on its computer servers (Electronic Medical Record, Network Server). PHI involved included patients' names, addresses, dates of birth, Social Security numbers, and medical information. The CE engaged Lore Systems for remediation and Provendatarecovery.com to restore files. OCR reviewed policies and obtained corrective-action assurances.
Affected (this filing): 31,120
HHS notified