HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 10, 2017.
- Organization as reported
- Andrea Yaley, DDS, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer, Electronic Medical Record, Email, Network Server
- Submission date
- July 10, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14129, row:5268)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Andrea Yaley, DDS, received a ransomware notice that encrypted its computers. The types of protected health information (PHI) involved in the incident included the full names, addresses, dates of birth, social security numbers, claims information, billing codes, and clinical information of approximately 1,200 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE immediately reported the incident to local and federal law enforcement and restored patient files from backups. As a result of this incident, the CE implemented policies and procedures, upgraded its computer equipment and software, and contracted with a company to provide active monitoring of computer activity in order to safeguard electronic PHI. OCR obtained assurances that the CE implemented the corrective actions listed.