Vincera Institute, a sports medicine facility in Philadelphia, issued a notice for a ransomware attack that occurred April 29.
Though there is currently no evidence of unauthorized access or misuse of patient data, potential compromised data includes patients' full name, contact details (address, phone number, email address), Social Security number, date of birth, medical history and treatment records, insurance information, or any other information patients may have given to the Vincera Institute, according to a June 21 news release from the group.
The cyberattack was reported to the HHS' Office for Civil Rights on June 20 in four breach reports, which covered Vincera Imaging, Vincera Rehab and Vincera Surgery Center, which involved 5,000 individuals each, and Core Performance Physicians, doing business as Vincera Core Physicians, which involved 10,000 individuals, according to the HIPAA Journal.
The investigation is ongoing.