Recovery Institute of the South East P.A.

Recovery Institute of the South East P.A. (FL) reported to HHS OCR on 2017-10-21 a Hacking/IT Incident allegedly affecting 689 individuals, spanning Desktop Computer, EMR, Email, Laptop, Network Server, and other media. The report alleged a former employee remotely accessed computers without authorization (Dec 2016–Oct 2017). A forensic investigation by Envista Forensics found no evidence of malware, unauthorized access, or data exfiltration; PHI was not exposed. OCR found inadequate HIPAA policies and provided technical assistance; the CE implemented corrective actions.

Affected (this filing): 689