24 ON Physicians PC (GA) reported to HHS on 2014-08-15 a Hacking/IT Incident (server misconfiguration/repurpose) affecting 10,104 individuals. On June 10, 2014, the CE discovered its BA, PST Services, had hired offshore subcontractor GeBBS, which repurposed a network server exposing PHI (names, invoice numbers, procedure codes, charges, balances, policy numbers, billing comments, dates of service) over the Internet from Dec 1, 2013 to Apr 17, 2014. Server was taken offline, PHI destroyed, and CE terminated the subcontractor relationship. Free credit monitoring was provided to affected individuals.
Affected (this filing): 10,104