TNHHS OCRFirst filing
Filed Feb 26, 2018bd_4a86069617054fb1
Center for Sports Medicine and Orthopedics (CSMO), a Tennessee healthcare provider, reported a breach affecting 800 individuals after its business associate CoPilot was hacked and an unauthorized individual gained access to one of CoPilot's databases. ePHI involved included names, dates of birth, addresses, phone numbers, health insurance information, and Social Security numbers. CoPilot notified the media and affected individuals, added technical and physical safeguards, migrated ePHI to a new server, and retrained staff. OCR obtained assurances of corrective action.
Affected (this filing): 800
HHS notified