MARYLANDHHS OCRFirst filing
Filed Dec 28, 2016bd_16da7c3f2f823dbd
On November 3, 2016, a cyber-attacker accessed Maryland Medical Center/Dr. Morrill's (MD) practice desktop computer system and deployed ransomware, denying access until a ransom was paid. Approximately 10,000 individuals were affected. Compromised data included patient names, dates of birth, and Social Security numbers contained in test-result correspondence. The CE recovered via backup, quarantined viruses, implemented network controls and device pre-approval procedures, and sanctioned the responsible employee. HHS OCR verified corrective actions. Submitted to HHS on 2016-12-28.
Affected (this filing): 10,000
HHS notified