ARHHS OCRFirst filing
Filed Sep 7, 2011bd_a86f1205014935cc
NEA Baptist Clinic (AR) reported to HHS on 2011-09-07 a Hacking/IT Incident affecting 3,116 individuals. An unknown individual hacked into a database containing ePHI of online-registered patients spanning eight years. Exposed PHI included names, addresses, and dates of birth. The CE replaced its website with improved safeguards and, following OCR investigation, implemented new ePHI protection procedures including inventory/asset management and encrypted device tracking. Breached information located on Network Server.
Affected (this filing): 3,116
HHS notified