HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 1, 2017.
- Organization as reported
- Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Sept. 1, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14075, row:5214)
- Archived copy
- Held in the private archive (provenance)
On July 5, 2017, the covered entity (CE), Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists, was informed that the hacker group, the Dark Overlord, may have breached their computer network. The CE reported the notice to the Ventura County Sheriff's High Tech Task Force, who began a forensic information technology investigation in consultation with the Federal Bureau of Investigation. This investigation is ongoing. To date, law enforcement has found no evidence of any information leaving the CE's system. However, unauthorized access has not been ruled out, and out of an abundance of caution, the CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE changed passwords, updated access control logs, updated its email policy and procedures, and added technical and administrative security improvements. OCR obtained assurances that the CE implemented the voluntary corrective actions noted above.