HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Nov. 9, 2018.
- Organization as reported
- James R. Etzkorn, MD, MO
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Nov. 9, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13635, row:4774)
- Archived copy
- Held in the private archive (provenance)
The medical practice of James R. Etzkorn, M.D., a covered entity (CE), suffered a ransomware attack beginning September 5, 2018, causing the attacker to potentially have access to billing records for 6,845 individuals. The CE provided breach notification to HHS. On November 13-19, 2018, when the CE provided individual notification regarding the event, it inadvertently addressed the notification letters to the wrong affected individuals, resulting in a second breach affecting the same 6,845 individuals. OCR has consolidated all issues from the initial breach into an investigation of the subsequent breach.