Elliot J Martin Chiropractic PC (NY) reported to HHS on 2016-02-24 a Hacking/IT Incident affecting 1,200 individuals. An unauthorized user established an account with administrative privileges on the CE's desktop computer system containing ePHI. The CE notified HHS, individuals, and media. Remediation included malware scanning, password and IP changes, firewall installation, and policy updates to stop collecting SSNs. OCR obtained corrective-action assurances and required a risk analysis and access management improvements.
Affected (this filing): 1,200