Malware Tragedy in MI Makes Potential PHI Data Breach

A recent potential PHI data breach appeared after malware infected a server, while another possible healthcare data violation was caused by a hacking incident.

Michigan-based Complete Chiropractic and Bodywork Therapies has notified sufferer of a possible PHI data breach after a server was accessed by an unauthorized entity.

In accordance to the OCR’s data breach portal, approximately 4,082 individuals were affected by the healthcare data security event.

Complete Chiropractic and Bodywork Therapies reported that an outside party had acquired access to a server containing PHI starting on the day of November 19, 2015. The practice did not discover the intrusion until after the server malfunctioned on March 19, 2016.

The security event likely occurred after malware infected the practice’s systems, stated the notice on its website. With the help of IT forensic experts, the practice determined that the malware probably scanned its systems to gain login and password data.

The server held patient data, involving treatment, billing and EHR data.