HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 12, 2019.
- Organization as reported
- Rogerson House, Inc., MA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 12, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13329, row:4468)
- Archived copy
- Held in the private archive (provenance)
Rogerson House filed a breach report indicating that a vendor, ResiDex Software, experienced a ransomware incident that affected the protected health information of 500 individuals. Initially Rogerson House reported to OCR that it was a covered entity (CE), but upon further investigation, it determined that this was an error. Because Rogerson House does not transmit any health information in electronic form in connection with a transaction for which HHS has adopted standards, it is not a CE. Therefore, the requirements of the Privacy, Security, and Breach Notification Rules do not apply.