Back to the register

Norwood Clinic

ArchivedSubmitted 02/25/2022
State
TN
Covered entity type
Healthcare Provider
Individuals affected
228,000
Business associate present
No
Type of breach
Hacking/IT Incident
Location of breached information
Electronic Medical Record
First seen by InfoSec Signals
9/23/2026
Last seen in OCR export
9/23/2026

OCR description

On October 22, 2021, Norwood discovered that it was the victim of a cyber attack that resulted in the unauthorized access of data stored on its network. Immediately after discovering the incident, Norwood took steps to secure and safely restore its systems and operations. In addition, Norwood engaged cybersecurity experts to conduct a thorough forensics investigation to determine the nature and scope of the incident and to assist in the remediation efforts. The investigation revealed that an unauthorized party gained access to Norwood's servers that stored patient information. However, the investigation was unable to confirm the specific information that may have been accessed. Therefore, out of an abundance of caution, Norwood is providing notice to all of its patients, regardless of whether their information was in fact subject to unauthorized access or acquisition. Norwood has no reason to believe that any individual's information has been misused as a result of this event.

Change history

  • 9/23/2026Added to OCR's archive list

Source: U.S. Department of Health and Human Services, Office for Civil Rights, Breach Portal. Records are reproduced as published; entity names and figures are OCR's.

We use essential cookies to run this site and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.

Norwood Clinic (TN), 02/25/2022 | InfoSec Signals