Ambulatory Surgery Center at St. Mary

The covered entity (CE), The Ambulatory Surgery Center at St. Mary, experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 13,000 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license information, and clinical information. Following the breach, the CE implemented additional technical and security safeguards and retrained its staff. OCR provided technical assistance to the CE.