OKHHS OCRFirst filing
Filed Oct 7, 2016bd_26189124a9062e45
Warren Clinic (operated by St. Francis Health Systems, OK) reported to HHS on 2016-10-07 a Hacking/IT Incident affecting 2,938 individuals. An unauthorized user deployed ransomware against the clinic's network server and demanded payment to recover patient data. Breached PHI included demographic and clinical information. The CE notified HHS, affected individuals, and the media; provided complimentary identity protection; implemented safeguards; and restricted servers from internet access. OCR obtained assurances of corrective action.
Affected (this filing): 2,938
HHS notified