Here are four things to know.
1. On that date, an unauthorized and anonymous cyberattacker accessed two old data servers for fewer than five minutes, according to The Commercial Appeal.
2. During that time, the attacker encrypted the servers and demanded thousands of dollars in ransom money to unencrypt them. The practice refused to pay, instead notifying HHS to conduct an investigation.
3. Primary Care Specialists on March 3 determined the cyberattack may have compromised protected health information such as patients’ names, dates of birth, Social Security number and medical information. The incident affected 65,000 individuals, according to HHS’ Office for Civil Rights’ breach portal.
4. The practice said there is no evidence the cybercriminal has recorded or misused the affected patient records. In notification letters sent to patients last week, the practice advertised a dedicated call center and noted affected individuals could set up fraud alerts with a credit reporting agency.
Editor’s note: Becker’s Hospital Review reached out to Primary Care Specialists for comment and will update as more information is available.
Click here to view the practice’s notice.
More articles on health IT:
Trump fires FBI Director James Comey
Study: Can mHealth encourage smokers to quit?
Memorial Hermann agrees to $2.4M HIPAA settlement
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.