Hand & Upper Extremity Centers

On July 5, 2017, the covered entity (CE), Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists, was informed that the hacker group, the Dark Overlord, may have breached their computer network. The CE reported the notice to the Ventura County Sheriff's High Tech Task Force, who began a forensic information technology investigation in consultation with the Federal Bureau of Investigation. This investigation is ongoing. To date, law enforcement has found no evidence of any information leaving the CE's system. However, unauthorized access has not been ruled out, and out of an abundance of caution, the CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE changed passwords, updated access control logs, updated its email policy and procedures, and added technical and administrative security improvements. OCR obtained assurances that the CE implemented the voluntary corrective actions noted above.