HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of March 6, 2017.
- Organization as reported
- Tarleton Medical, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- March 6, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14249, row:5388)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE) was the victim of a malware/ransom attack. The electronic protected health information (ePHI) involved in the breach included the names, dates of birth, addresses, social security numbers, and health care claims information of of 3,929 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE strengthened its administrative and technical safeguards by implementing a stronger password policy encrypting all its computers, and enhancing firewall and antivirus protection for its electronic systems. OCR’s investigation resulted in the CE enhancing its safeguards for ePHI.