HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 21, 2023.
- Organization as reported
- Murfreesboro Medical Clinic & SurgiCenter, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- June 21, 2023
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 10643, row:1782)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Murfreesboro Medical Clinic & SurgiCenter, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 559,000 individuals. The PHI involved included names, addresses, birthdates, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards.