DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Bobby Yee, D.P.M notified 24,000 patients after ransomware attack

Posted on January 5, 2019 by Dissent

A somewhat confusing press release of December 20:

The Podiatric Offices of Bobby Yee announced today that it was subject to a data incident, which may have potentially exposed some information of clients and individuals. 

What Happened?

On Monday, October 29th, 2018, the Podiatric Offices of Bobby Yee was the victim of a ransomware attack which resulted in the unauthorized alteration and potential corruption of their medical files, including patient personal information. Importantly, there is no evidence suggesting that personal or medical information was viewed or exfiltrated.   


What Information Was Involved?
The altered information may have included first name, last name, address, telephone number, age, gender, date of birth, Social Security number, health insurance policy number, and patient medical records.

 
What Are We Doing.
Once we became aware, we promptly took steps to protect your personal information and to determine the nature and scope of the issue. If there is indeed any alteration or corruption of your personal information, we may need to reconfirm or reconstruct the information, including your medical information.   

[…]

For More Information.
If you have any questions or need additional information, please call toll free number 877-845-8111 Monday through Friday, from 6:00 A.M. to 6 P.M. PST. You may also write the Podiatric Offices of Bobby Yee at 880 Cass St., # 201, Monterey, California 93940.


We regret any concern or inconvenience this matter may have caused you and appreciate your patience and understanding.


SOURCE The Podiatric Offices of Bobby Yee

I’m not sure I understood that notification. At a few points, it sounds like they are saying that the files were altered. At another place, it sounds like they are saying potential alteration. Which is it? Have files been altered or were some files corrupted/made unreadable by the ransomware? I have emailed Dr. Yee to request clarification and will update this post when I get a reply. One of the questions I asked was whether they had a complete backup that they could restore from if files were corrupted.


Related:

  • Attorney General James Announces Settlement with Wojeski & Company Accounting Firm
  • JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
  • A business's cyber insurance policy included ransom coverage, but when they needed it, the insurer refused to pay. Why?
  • Before Their Telegram Channel Was Banned Again, ScatteredLAPSUS$Hunters Dropped Files Doxing Government Employees (2)
  • Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident
  • Data BreachesProsper Data Breach Impacts 17.6 Million Accounts
Category: Health DataMalwareU.S.

Post navigation

← Detroit Fire Department personal information compromised after fire at former training school
Solis Mammography notifies 500 patients and HHS after laptop theft →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.