Memphis, Tenn.-based Primary Care Specialists on Feb. 27 experienced a malware attack and ransom demand, The Commercial Appeal reports.
Here are four things to know.
1. On that date, an unauthorized and anonymous cyberattacker accessed two old data servers for fewer than five minutes, according to The Commercial Appeal.
2. During that time, the attacker encrypted the servers and demanded thousands of dollars in ransom money to unencrypt them. The practice refused to pay, instead notifying HHS to conduct an investigation.
3. Primary Care Specialists on March 3 determined the cyberattack may have compromised protected health information such as patients' names, dates of birth, Social Security number and medical information. The incident affected 65,000 individuals, according to HHS' Office for Civil Rights' breach portal.
4. The practice said there is no evidence the cybercriminal has recorded or misused the affected patient records. In notification letters sent to patients last week, the practice advertised a dedicated call center and noted affected individuals could set up fraud alerts with a credit reporting agency.
Editor's note: Becker's Hospital Review reached out to Primary Care Specialists for comment and will update as more information is available.
Click here to view the practice's notice.