Newark, Del.-based Medical Oncology Hematology Consultants experienced a ransomware attack June 17, which affected files on the practice's server and desktop workstations.
Upon discovering the incident July 7, Medical Oncology Hematology Consultants officials immediately commenced an investigation to determine the scope of the attack. They also engaged third-party experts to assist in recovering affected files and to examine whether protected health information had been compromised.
Officials reported 19,203 individuals were affected in the incident, according to an Aug. 29 submission to HHS' Office for Civil Rights breach portal.
There is no evidence an unauthorized individual accessed or disclosed patient information as a result of the incident, according to Medical Oncology Hematology Consultants officials. Affected files contained information related to patient names, dates of birth, phone numbers, health information and treatment information.
To avoid future security incidents, officials reset the practice's network passwords, implemented a two-factor login authentication system and provided employees with additional data security training, among other procedures. They also offered affected individuals one year of free credit monitoring services.
Click here to view the full notification.
Editor's note: Becker's Hospital Review reached out to Medical Oncology Hematology Consultants for comment and will update as more information becomes available.