Loudoun Medical Group data breach (2019)

Breach window

Jun 15, 2019

When the intrusion reportedly occurred, per the linked filings

165 days

VAHHS OCRFirst filing

Filed Nov 27, 2019bd_5e6b9ab4a3822072

Loudoun Medical Group d/b/a Comprehensive Sleep Care Center (CSCC), a healthcare provider in Virginia, reported to HHS on 2019-11-27 a Hacking/IT Incident affecting 15,575 individuals. An employee was the victim of an email phishing scheme, exposing PHI including names, addresses, birthdates, diagnoses, clinical information, and treatment information via Email. The CE notified HHS, affected individuals, and the media, provided substitute notice, and implemented additional technical safeguards.

Affected (this filing): 15,575

HHS notified

🦬Montana State AGMost recentlinked via same-victim cross-source · 100%

Filed Nov 27, 2019bd_d3f16780c73a51c7

Loudoun Medical Group d/b/a Comprehensive Sleep Care Center reported a data breach to the Montana Attorney General. The breach was reported on 2019-11-27. The breach occurred from 6/15/2019 to 6/19/2019. 2 Montana residents were affected.

Affected (this filing): 2

Loudoun Medical Group

Litigation Timing

Timeline