The fastest way to reach us is already on your computer
Every practice computer we manage has a Comodo icon in the system tray, next to the clock. It raises a ticket or starts a chat without you leaving what you are doing — and it tells us which machine you are on, which is usually the difference between a fix in minutes and three emails asking which PC you meant.
COMODO TECHNOLOGY
On a phone, a personal device, or a computer we do not manage, use one of these instead.
Healthcare & Dental Security Incident Response Plan
Standard operating procedure for client practices across California when handling suspected ransomware, unauthorized ePHI exposure, compromised cloud credentials, or lost clinical hardware.
Ransomware / Active Breach / Stolen Unencrypted Device
Ransomware (files renamed, Open Dental / Dentrix locked, ransom note on screen), an active practice-management or EHR breach, a lost or stolen unencrypted laptop or drive holding patient data, or widespread phishing.
Credential Theft / Lost Encrypted Device / Several Charts Misdirected
Staff entered M365 or PMS credentials into a phishing page; a lost encrypted iPad or laptop; a fax or email with several patients' charts sent to the wrong recipient.
Misdirected Fax or Email / Blocked Phish
One patient's record faxed or emailed to the wrong patient or provider; a phishing link clicked with no password entered, or blocked by Comodo's DNS filter; malware stopped before it ran.
The 6-Phase Containment & Resolution Protocol
Practice workflow executed in coordination with Comodo Technology engineers
Immediate Discovery
Staff observes anomalous behavior (locked charts, odd browser popups, suspicious MFA push alerts). Practice Security Officer alerted within 15 minutes.
Physical Containment
Disconnect physical network jack and disable Wi-Fi. Do not reboot or power down. Comodo isolates device endpoint via cloud EDR agent remotely.
Forensic Eradication
Comodo engineers extract endpoint volatile memory logs, identify infection source, kill malicious background processes, and verify backup repository integrity.
Clean State Recovery
Restore clean virtual machine snapshots or database backups from immutable offsite cloud storage. Validate Open Dental / Dentrix integrity before clinical check-in.
4-Factor Breach Audit
Practice legal counsel and HIPAA Officer run the regulatory 4-factor test under 45 CFR § 164.402 to establish whether a formal notification obligation exists.
Regulatory Disclosure
If it is a breach, notify affected individuals within 60 days of discovery. 500 or more individuals: notify HHS at the same time (and the media if more than 500 residents of one state). Fewer than 500: log it and report to HHS within 60 days after the end of the calendar year. Keep the records for 6 years.