Arizona Department of Economic Security, Division of Developmental Disabilities

The covered entity (CE), Gladden Farms Family Dentistry, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 3,085 individuals. The PHI involved included names, dates of birth, Social Security numbers, medication information, lab results, diagnoses, and health insurance information. The CE notified HHS, affected individuals and the media. In response to the breach, the strengthened its policies and procedures, implemented additional technical safeguards, and retrained its staff. OCR provided technical assistance regarding the HIPAA Rules.