Anchorage Community Mental Health Services (ACMHS) reported a data breach to HHS affecting 2,743 individuals. The breach was caused by malware that compromised the security of its IT resources, which included desktop computers. An investigation by the Office for Civil Rights (OCR) found that ACMHS had failed to address basic security risks, such as not patching systems and running unsupported software. As a result, ACMHS agreed to a settlement of $150,000 and a corrective action plan.
Affected (this filing): 2,743