The covered entity (CE), Arkansas Blue Cross and Blue Shield, reported that its business associate (BA), experienced a cyber-attack that compromised the protected health information (PHI) of 633 individuals. The PHI involved included demographic and clinical information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented new technical safeguards.
