Memorial Hospital Clinic West

Seminole Hospital District of Gaines County Texas, the covered entity (CE), was a victim of a ransomware attack on a shared computer server for Memorial Hospital Clinic West (MHCW) and Memorial Hospital Clinic South (MHCS), part of the CE. As a result of the attack, the protected health information (PHI) of approximately 521 patients from MHCW and 842 patients from MHCS was held for ransom. The types of PHI involved in the breach included demographic and clinical information. The CE provided breach notification to HHS, affected individuals and the media. Following the breach, the CE retrained staff and deployed additional software to block ransomware attacks. OCR obtained assurances that the CE implemented the corrective actions noted above.