- State
- MO
- Covered entity type
- Healthcare Provider
- Individuals affected
- 6,845
- Business associate present
- No
- Type of breach
- Hacking/IT Incident
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- Sep 23, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
The medical practice of James R. Etzkorn, M.D., a covered entity (CE), suffered a ransomware attack beginning September 5, 2018, causing the attacker to potentially have access to billing records for 6,845 individuals. The CE provided breach notification to HHS. On November 13-19, 2018, when the CE provided individual notification regarding the event, it inadvertently addressed the notification letters to the wrong affected individuals, resulting in a second breach affecting the same 6,845 individuals. OCR has consolidated all issues from the initial breach into an investigation of the subsequent breach.
Change history
- Sep 23, 2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.