HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Feb. 28, 2024.
- Organization as reported
- kmj Health Solutions, MI
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Feb. 28, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10104, row:1243)
- Archived copy
- Held in the private archive (provenance)
The business associate (BA), KMJ Health Solutions, reported that it experienced a hacking attack that compromised the protected health information (PHI) of 2,191 individuals. The PHI involved included names, dates of birth, diagnoses/conditions, lab results, medications, and other treatment information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA updated/revised its relevant policies and procedures, implemented security enhancements, and increased its threat protections to better protect its PHI. OCR provided the BA with technical assistance regarding the HIPAA Rules.