Arthritis and Rheumatism Associates
Disclosed Mar 1, 20197 years ago500 affectedConfirmed
The covered entity (CE), Arthritis & Rheumatism Associates, experienced a ransomware attack that affected the electronic protected health information (ePHI) of approximately 500 individuals. The ePHI involved included names, dates of birth, Social Security numbers, claims information, and clinical information. Following the breach, the CE implemented additional administrative and technical safeguards to better protect its ePHI. OCR provided technical assistance regarding the HIPAA Security Rule.
What is known
| People affected | 500 (as reported to HHS) |
|---|---|
| Disclosed | Mar 1, 2019 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Arthritis and Rheumatism Associates (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 1, 2019 | 500 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.