Orleans Medical Clinic (Orleans) in Indiana has notified the Office for Civil Rights that the protected health information of 6,890 patients was compromised as a result of an upgrade to its server. Orleans is in the process of notifying the affected patients whose information was exposed. According to Orleans, when it upgraded its server, its electronic health record was unsecured and accessible to hackers for twelve days.
All current and former patients’ information, including names, addresses, dates of birth and Social Security numbers was exposed between April 5, 2016, and April 17, 2016, to hackers.
[View source.]
