Columbia County Child Abuse Assessment Center dba The Amani Center

The Columbia County Child Abuse Assessment Center, doing business as The Amani Center in Oregon, experienced a data breach that was identified on August 18, 2023, due to suspicious activity in an employee’s email account. The investigation revealed that several email accounts had been compromised, affecting not only The Amani Center but also several other businesses and organizations in the community. Unauthorized access to these accounts occurred between an unspecified date in 2023 and August 18, 2023.

The review of the compromised email accounts was completed on October 19, 2023, and it was confirmed that a significant amount of sensitive information had been exposed. This included patient names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, driver’s license/state ID numbers, financial account numbers, routing numbers, financial institution names, credit/debit card information, treatment/diagnosis information, prescription information, provider names, medical record numbers, Medicare/Medicaid ID numbers, health insurance information, treatment cost information, and digital signatures.

In response to the breach, The Amani Center reviewed and updated its email security policies and procedures. Although no evidence of misuse of patient data was found, and the risk of data misuse was believed to be low, the affected individuals were offered complimentary credit monitoring and identity theft protection services. The breach was reported to the Office for Civil Rights as affecting 2,374 individuals[1].

Citations:

1. https://www.hipaajournal.com/december-14-2023-healthcare-data-breach-round-up/
2. https://amanicenter.org/notice-of-data-incident/
3. https://www.co.columbia.or.us/files/ccccf/columbiacountycomprehensiveplanupdate.pdf
4. https://dojmt.gov/consumer/databreach/
5. https://amanicenter.org/karlys-law/
6. https://www.thechronicleonline.com/content/tncms/assets/v3/editorial/7/2a/72a2580c-793f-11ea-98e4-d3b1987a483b/5e8d34d02c543.pdf.pdf
7. https://www.p4photel.com/topic/cybersecurity-notes-87
8. https://www.thechronicleonline.com/news/rubber-ducks-1-561-raised-for-the-amani-center/article_6555c58c-3e0a-11ea-994a-33fe2e9d564f.html
9. https://myemail.constantcontact.com/News-from-District-Attorney-Kevin-Barton.html?aid=tVAUn8XSu80&soid=1133805392847
10. https://breachdata.topwords.me/hipaa?limit=20&offset=80&sort=reported_date
11. https://amanicenter.org/december-5-bunco-fundraiser/
12. https://www.nypwa.org/vs-uploads/cle-credits—wc23/1673984897_7-1-22-%2012-31-22%20Case%20Law%20Update%20Full%20Cases.pdf
13. https://breachdata.topwords.me/states/OR?limit=20&offset=40&sort=data_source
14. https://www.thechronicleonline.com/news_paid/st-helens-police-department-teams-with-amani-center-to-present-on-child-abuse-for-april/article_c99aa864-621e-11e9-9b20-ff5664577df8.html
15. https://d3n9y02raazwpg.cloudfront.net/sthelens/faf08c7f-06f9-480b-b6f5-fb3a94e85065-0aa405e2-dbe3-43a0-a371-c0290256dc89-1557529743.pdf
16. https://elder-abuseca.com/docs/ColumbiaORResource%20Dir%2008-32.pdf
17. https://www.itsyourrace.com/event.aspx?id=560
18. https://ovc.ojp.gov/states/va-fy-2020-oregon-annual-report.pdf
19. https://mccmeetingspublic.blob.core.usgovcloudapi.net/sthelensor-meet-9d61b87e699d4cff92fc53b1ef302552/ITEM-Attachment-001-5d4e19caed644fefb80efe648826fc43.pdf