The DSO, which has 72 locations throughout Texas, said in a notice on its website that the incident took place between July 27 and Aug. 16. It became aware of the breach Aug. 9 and worked to restore its systems and launched an investigation. It began notifying patients in January after its investigation.
The DSO determined that certain documents stored within its system that may have contained clinical information, patient demographic information, health insurance information and financial information were copied. Up to 1,026,820 patients could be affected by the breach, but the DSO said there is no evidence yet that any compromised data has been misused.
This is the largest data breach to be reported to the state’s Attorney General since a new state law was enacted Sept. 1 requiring companies to report data breaches affecting 500 or more Texans.
