The business associate (BA), Smith, Gambrell & Russell, LLP, reported that it experienced a hacking incident that affected the protected health information (PHI) of 4,688 individuals. The PHI involved included demographic, clinical, and financial information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.
2026-09-25 · sector: other to health · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · summary: empty to The business associate (BA), Smith, Gambrell & Russell, LLP, reported that it experienced a hacking incident that affected the protected health information (PHI) of 4,688 individuals. The PHI involved included demographic, clinical, and fin · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 6515 · backfill source
2026-09-25 · disclosed: 2022-08-08 to 2022-06-28 · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-01-27-smith-gambrell-russell-data-breach-notice-consumers · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2021-08-09 · backfill source
2026-09-25 · disclosed: 2023-03-01 to 2022-08-08 · backfill source
