The Baton Rouge Clinic, A Medical Corporation data breach (2020)

Breach window

Jun 3, 2020 → Jul 28, 2020

When the intrusion reportedly occurred, per the linked filings

35 days

Breach discovered

Jul 8, 2020

Reported by HHS OCR, MAINE AG filings

56 days

LAHHS OCRFirst filing

Filed Sep 2, 2020bd_f33e1486a998dc79

The Baton Rouge Clinic, A Medical Corporation (LA) reported to HHS on 2020-09-02 a ransomware attack affecting the ePHI of 308,169 individuals. Breached information was located on Desktop Computer, Email, and Network Server. Exposed data included names, addresses, dates of birth, diagnoses, lab results, medications prescribed, and other treatment information. The CE retrained employees on email security and implemented additional administrative, technical, and security safeguards.

Affected (this filing): 308,169

HHS notified

🦞Maine State AGMost recentlinked via same-victim cross-source · 95%

Filed Sep 17, 2020bd_60523dffff7f8c7c

The Baton Rouge Clinic, a medical corporation, reported a data breach impacting 14 Maine residents. The breach, described as an external system breach (hacking), occurred between June 3, 2020, and July 28, 2020, and was discovered between July 8, 2020, and August 14, 2020. Affected individuals were notified in writing between August 31, 2020, and September 5, 2020.

Affected (this filing): 14

The Baton Rouge Clinic, A Medical Corporation

Litigation Timing

Timeline