HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of June 11, 2019.
- Organization as reported
- Desert Healthcare Services, LLC, AZ
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- June 11, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13367, row:4506)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Desert Healthcare Services (DHS), LLC, reported that its server was compromised due to a ransomware attack. The breach affected 8,000 individuals. Based on a forensic analysis of its computer system, it was determined that it was unlikely that electronic protected health information (ePHI) was compromised since it was encrypted. DHS reported the breach to the FBI, hired a forensic investigator, and contracted with a cybersecurity firm to remove the malware from its server. In addition, DHS implemented additional security safeguards. Upon receiving the FBI and forensic reports on this matter, the CE provided breach notification to OCR, affected individuals, and the media.