Poughkeepsie, N.Y.-based Orthopedic Associates of Dutchess County was recently the victim of a cyberattack that exposed patients' protected health information.
On March 5, the 22-physician practice discovered suspicious activity on its computer systems. An investigation found that an unauthorized user accessed its network, encrypted certain systems and may have removed and/or viewed certain files.
Orthopedic Associates said it could not rule out the possibility that some patients' information may have been viewed or taken. The information could include patient health insurance details, payment details, Social Security numbers, cell phone number and birth dates.
HHS and the FBI have been notified about the incident. The practice said it is "reviewing and enhancing" policies and procedures to guard against future incidents.