Aon

Aon, a business associate (BA) and covered entity (CE), reported that it experienced a ransomware incident that affected the protected health information (PHI) of 129,682 individuals. The PHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, health insurance information, and other treatment information. The BA/CE notified HHS, affected individuals, and the media. In response to the breach, the BA/CE offered complimentary credit monitoring and identity theft protection services and implemented additional administrative and technical safeguards. Staff were also retrained on protecting and securing PHI.