Tennessee Orthopaedic Clinics (TOC) reports that after responding to a security problem, they discovered that some of their systems had been accessed by an unauthorised entity.
They do not specify malware or ransomware or whether a ransom or extortion demand was made, but the incident apparently caused some systems to become unresponsive.
PHI of some patients was reportedly accessed or obtained, according to TOC. The details varied depending on the patient and could have included names, contact information, dates of birth, information on the diagnosis and course of treatment, names of the providers, dates of services, costs of services, prescription information, and/or health insurance details.
TOC was apparently still figuring out who needed to be contacted because it hadn't yet begun notifying patients.
"id": "TEN16225623",
"linkid": "tennessee-orthopaedic-clinics",
"type": "Breach",
"date": "05/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"