HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 10, 2022.
- Organization as reported
- New Jersey Brain and Spine, NJ
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- March 10, 2022
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11578, row:2717)
- Archived copy
- Held in the private archive (provenance)
New Jersey Brain and Spine, the covered entity (CE), reported that it experienced a cyber-attack that compromised the protected health information (PHI) for 92,453 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE installed a new server and implemented multi-factor authentication.