Absolute Total Care

The covered entity (CE), Absolute Total Care, reported that its business associate (BA) was the victim of a cyberattack that affected the electronic protected health information (ePHI) of 1,286 individuals. The ePHI involved included names, addresses, telephone numbers, dates of birth, diagnoses, medical conditions, health insurance and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE terminated its business relationship with the BA. OCR provided the CE with technical assistance regarding the HIPAA Breach Notification Rule.