NJHHS OCRFirst filing
Filed Nov 28, 2017bd_1affb44160cc18f9
Hackensack Sleep and Pulmonary Center (NJ) reported to HHS OCR on 2017-11-28 a Hacking/IT Incident (ransomware) affecting 16,474 individuals. A ransomware virus encrypted electronic medical record files on a network server; the attacker demanded bitcoin payment to unlock files. The CE declined to pay and restored records from an offline backup. ePHI exposed included names, addresses, DOB, driver's license numbers, SSNs, email addresses, lab results, medications, diagnoses, and health insurance information. The CE notified HHS, affected individuals, media, and the NJ Cyber Unit, and subsequently adopted encryption and strengthened password controls. OCR obtained corrective action assurances.
Affected (this filing): 16,474
HHS notified