HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 5, 2016.
- Organization as reported
- Meigs County EMS, OH
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer, Email, Network Server
- Submission date
- Dec. 5, 2016
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14338, row:5477)
- Archived copy
- Held in the private archive (provenance)
On October 6, 2016, the covered entity (CE), Meigs County EMS, reported that it detected a ransomware attack on its computer server, and that the hackers might have acquired patients’ protected health information (PHI). The breach affected approximately 817 individuals, and the types of PHI involved in the breach included demographic, financial, and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. In response to the breach, the CE implemented physical, administrative and technical safeguards. The CE also performed an audit of its computer network accounts by removing unnecessary or stale accounts. OCR obtained assurances that the CE implemented the corrective actions noted above.