HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Feb. 25, 2022.
- Organization as reported
- Norwood Clinic, TN
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Electronic Medical Record
- Submission date
- Feb. 25, 2022
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11599, row:2738)
- Archived copy
- Held in the private archive (provenance)
On October 22, 2021, Norwood discovered that it was the victim of a cyber attack that resulted in the unauthorized access of data stored on its network. Immediately after discovering the incident, Norwood took steps to secure and safely restore its systems and operations. In addition, Norwood engaged cybersecurity experts to conduct a thorough forensics investigation to determine the nature and scope of the incident and to assist in the remediation efforts. The investigation revealed that an unauthorized party gained access to Norwood's servers that stored patient information. However, the investigation was unable to confirm the specific information that may have been accessed. Therefore, out of an abundance of caution, Norwood is providing notice to all of its patients, regardless of whether their information was in fact subject to unauthorized access or acquisition. Norwood has no reason to believe that any individual's information has been misused as a result of this event.