Walnut Place (TX), a healthcare provider, reported to HHS on 2017-07-05 two ransomware attacks on a network server containing ePHI affecting approximately 5,000 individuals (combined ~6,500 across both incidents). Exposed data included names, SSNs, driver's license numbers, dates of birth, addresses, phone numbers, medical record numbers, payment information, insurance information, and clinical information. The CE removed infected files, notified HHS/individuals/media, improved safeguards, and retrained staff. OCR obtained assurances of corrective actions.
Affected (this filing): 5,000