OnCallPractice

OnCallPractice, also known as Oncall Practice, is a vendor that provides services to medical practices. The organisation is headquartered in the United States of America. It operates from a shared medical facility alongside Primary Care of Long Island (PCOLI). As a vendor, its activities are tied to supporting the operational needs of healthcare providers in that facility. The organisation’s presence in the United States situates it within the domestic healthcare services sector.

On May 23, 2022, OnCallPractice was impacted by a ransomware attack claimed by the Bl00dy Ransomware Gang. The attack also affected PCOLI and reportedly involved the exfiltration of sensitive patient data. According to the attackers, approximately 900 GB of files were taken from multiple entities at the shared location. The stolen information included names, contact details, Social Security numbers, and dates of birth. The ransomware group threatened to sell the exfiltrated data if their demands were not met. Following the incident, OnCallPractice’s website was taken offline for an extended period. Neither OnCallPractice nor the other involved entities issued public breach notifications, leaving the full scope of the breach uncertain. The attackers also claimed to have taken data from Brighter Dental Center, another entity sharing the facility. PCOLI acknowledged unauthorized network access and data theft in its own breach notification, though OnCallPractice did not issue a similar statement. The coverage by databreaches.net highlighted the ransomware gang’s claim and the potential impact on patient privacy.