Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
USA: BHN notifies OCR of health data breach following virus affecting their internal systems
Behavioral Health Network, Inc. ('BHN') notified, on 27 July 2020, the U.S. Department of Health & Human Services' Office for Civil Rights ('OCR') of a data breach affecting 129,571 of its patients, which the OCR is now investigating. In particular, BHN highlighted that the breach resulted from a virus which occured on 28 May 2020, which led to prohibited access to BHN's files. In particular, BHN noted that through its investigation, BHN determined that an unauthorised actor had placed malware within the BHN environment that disrupted the operation of certain BHN systems. Moreover, BHN outlined that, around 17 July 2020, the investigation further determined that the unauthorised actor had gained access to certain BHN systems between 26 and 28 May 2020. Furthermore, BHN highlighted that the types of information which were present in the affected systems included, names, addressess, date of births, social security numbers, medical/diagnosis/treatment information, and/or health insurance claim information.
You can read the press release here and and the OCR notice of investigation here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
