HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 5, 2017.
- Organization as reported
- Walnut Place, TX
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 5, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14136, row:5275)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Walnut Place, experienced two ransomware attacks on one of its servers containing electronic protected health information (ePHI). The ePHI on the server included patients' names, social security numbers, driver’s license numbers, dates of birth, addresses, telephone numbers, medical record numbers, payment information, insurance information, and clinical information for a combined total of approximately 6,500 individuals for both incidents. The CE reported the second attack as a separate breach. Upon discovering the breach, the CE contained and stopped the attack by removing infected files from the server. The CE provided breach notification to HHS, affected individuals, and the media. The CE improved administrative and technically safeguards and retrained staff on observing and reporting malicious software. OCR obtained assurances that the CE implemented corrective actions to enhance its security controls.