St. Francis Physician Services data breach (2019)

Breach window

Jan 4, 2019

When the intrusion reportedly occurred, per the linked filings

59 days

SOUTH CAROLINAHHS OCRFirst filing

Filed Mar 4, 2019bd_d20b04c4222f1d85

St. Francis Physician Services (SC, healthcare provider) reported a cyber-attack affecting ePHI of 32,178 individuals. Compromised data included names, birthdates, addresses, health insurance information, and treatment information. The CE notified HHS, affected individuals, and the media; it also disabled/decommissioned its legacy EMR systems and transferred data to Bon Secours Mercy Health. Reported to HHS OCR on 2019-03-04. Vector specifics (ransomware vs. intrusion) not disclosed in source — action_variety set to hacking_unknown.

Affected (this filing): 32,178

HHS notified

🦬Montana State AGMost recent

Filed Mar 4, 2019bd_d59aca98b8d89470

St. Francis Physician Services reported a data breach to the Montana Attorney General. The breach was reported on 2019-03-04. The breach occurred on 1/4/2019. 2 Montana residents were affected.

Affected (this filing): 2

St. Francis Physician Services

Litigation Timing

Timeline