Lafayette Pain Care PC (IN) reported to HHS OCR on 2016-05-09 a Hacking/IT Incident affecting 7,500 individuals. Malware infected business associate Bizmatics, Inc., enabling unauthorized access to PHI stored on network servers in 2015. Exposed data included diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and media; provided substitute notice; established a call center; and offered one year of free credit monitoring. A new BA agreement with Bizmatics was executed and OCR obtained documented assurances of corrective action.
Affected (this filing): 7,500