Valley Anesthesiology Consultants, Inc.

Valley Anesthesiology Consultants, Inc., d/b/a Valley Anesthesiology and Pain Consultants reported a data breach to the Oregon Attorney General. The breach was reported on 2016-08-12. The breach occurred during 3/30/2016. The breach was discovered on 6/13/2016. 882,590 individuals were affected. Notice was sent on 8/12/2016.

Affected (this filing): 882,590

Valley Anesthesiology and Pain Consultants reported unauthorized access to computer systems on March 30, 2016, discovered June 13, 2016. Systems may contain patient names, SSNs, Medicare numbers, and diagnosis codes. Forensic investigation found no evidence of access but could not rule it out. No financial data was compromised. The company offered one-year credit monitoring and identity protection services to affected individuals.

Valley Anesthesiology Consultants, Inc. d/b/a Valley Anesthesiology and Pain Consultants (AZ) reported to HHS on 2016-08-12 a Hacking/IT Incident affecting 882,590 individuals. On March 30, 2016, a third party may have gained unauthorized access via remote desktop protocol using accounts with administrator privileges across the CE's network servers. Nine foreign IPs were identified and blacklisted; 15 suspicious local and 3 admin accounts were found potentially compromised. Breached ePHI included demographic and clinical information. OCR provided technical assistance on risk analysis, training, and access controls.