Northwest Rheumatology
Disclosed Jul 31, 20177,468 affectedConfirmed
On April 10, 2017, the covered entity (CE), Northwest Rheumatology, experienced a ransomware incident which left a limited portion of its computer system encrypted and inaccessible. Upon investigation the CE determined that 7,468 individuals’ electronic protected health information (ePHI) may have been affected, including clinical and demographic information. The CE provided breach notification to HHS, the affected individuals, and the media. In response to OCR’s investigation, the CE strengthened password requirements, implemented new technical safeguards, revised business associate contracts, and retrained workforce members.
What is known
| People affected | 7,468 (as reported by the organization) |
|---|---|
| Disclosed | Jul 31, 2017 |
| Happened | Mar 30, 2017 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.