HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Sept. 25, 2018.
- Organization as reported
- J&J MEDICAL SERVICE NETWORK INC, TX
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Sept. 25, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13682, row:4821)
- Archived copy
- Held in the private archive (provenance)
J & J Medical Service Network, Inc., the business associate (BA), reported that it was the victim of a cyber-attack involving ransomware. This attack affected the electronic protected health information (ePHI) of 17,479 individuals and the ePHI involved included names, addresses, birthdates, Social Security numbers, and clinical information. The BA was able to recover the data and a third-party forensic analysis found no evidence to conclude that the attacker accessed or exfiltrated the data. The BA notified HHS, affected individuals, and the media. Following this breach incident, the BA implemented additional administrative, technical, and security safeguards and retrained its workforce members. OCR obtained assurances that the business associate implemented the aforementioned corrective actions. Further, the BA notified OCR that it had closed its business.