USA: Precision Spine Care notifies OCR of data breach
Precision Spine Care ('PSC') notified, on 12 January 2021, the U.S. Department of Health & Human Services' Office for Civil Rights ('OCR') of a data breach affecting 20,787 individuals. In particular, PSC outlined that an employee's email account was remotely accessed by an unauthorised third party attempting to fraudulently divert funds. Furthermore, PSC noted that the accessed email account contained some patients' names, addresses, dates of birth, and limited health information. Finally, PSC highlighted that there is no evidence to suggest that any data was misused or otherwise in the possession of unauthorised persons.