HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Oct. 3, 2018.
- Organization as reported
- Tillamook Chiropractic, PC, OR
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Desktop Computer, Network Server
- Submission date
- Oct. 3, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13676, row:4815)
- Archived copy
- Held in the private archive (provenance)
Tillamook Chiropractic, P.C., the covered entity (CE), reported a breach of protected health information (PHI) affecting 4,063 patients in a malware security incident. Its information technology vendor discovered that malware had been installed on its billing system. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, social security numbers, claims information, clinical information, financial information, diagnoses, lab results, medications, and other treatment information. The CE confirmed the malware was removed. It rebuilt its server with a new operating system, encrypted its hard drives, installed antivirus software, adopted additional privacy and security policies and procedures, and retrained its staff. The CE also provided breach notifications to affected individuals and the media. OCR provided the CE with technical assistance regarding risk analysis, risk management, and the requirements of business associate agreements. OCR obtained assurances that the CE implemented the corrective actions noted.