Northeast OB/GYN Associates

Northeast OB/GYN Associates, the Covered Entity, (“CE”) reported that a keylogger virus on its computer network captured information keyed into the CE’s system for more than a month. The CE reported that the protected health information (PHI) of 10,198 individuals was involved in the breach. The types of PHI included demographic, financial, and clinical information. The CE notified the affected individuals and the media. During the course of the investigation, OCR determined that the CE retrained its staff and implemented technical and procedural changes to prevent a similar event from occurring in the future.