Brandywine Counseling & Community Services, Inc

Brandywine Counseling & Community Services, Inc. (DE) reported to HHS on 2020-04-10 a ransomware attack affecting ePHI on a Network Server for 11,852 individuals. Exposed data included names, addresses, Social Security numbers, dates of birth, drivers' license numbers, diagnoses, conditions, financial information, and other medical/treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. Additional technical and security safeguards were implemented.

Affected (this filing): 11,852

Brandywine Counseling & Community Services, Inc. (BCCS), a Delaware nonprofit healthcare provider, disclosed a ransomware incident discovered on February 10, 2020. The attack affected 3,022 Delaware residents, exposing names, dates of birth, health insurance info, limited clinical treatment data, and for 2,805 individuals, Social Security numbers and/or driver's license numbers. BCCS engaged forensic investigators and law enforcement, secured the network, and began notifying affected individuals on April 10, 2020, offering one year of credit monitoring via Kroll.

Affected (this filing): 3,022

Brandywine Counseling & Community Services, Inc. notified the NH Attorney General of a ransomware incident discovered on Feb 10, 2020. The breach affected 2 NH residents, exposing PHI, SSNs, and DOB. Notifications began May 13, 2020. Response included forensic investigation, law enforcement notification, and credit monitoring services.

Affected (this filing): 2