MAINEHHS OCRFirst filing
Filed Dec 8, 2015bd_d5ea91f5b6ff8fb8
Maine General Health (ME) reported to HHS OCR on 2015-12-08 a Hacking/IT Incident affecting approximately 120,247 individuals. On November 13, 2015, the FBI informed the CE it had discovered CE data on an online Russian message board. Internet-browsing activity on a CE workstation led to malware infection; an intruder remotely scanned the network, stole credentials, and accessed servers containing PHI including names, demographics, dates of birth, diagnoses, treatments, medical record numbers, and health insurance IDs. Breached info resided on network servers. OCR obtained assurances of corrective action completion.
Affected (this filing): 120,247
HHS notified