Allergy Medical Group of the North Area

The covered entity (CE), Allergy Medical Group of the North Area, reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 6,934 individuals. The PHI involved included names, dates of birth, and financial and health insurance information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. In addition, the CE retrained its workforce members on security awareness precautions. OCR provided technical assistance to the CE regarding the HIPAA Rules.