Atchafalaya Internal Medicine Associates

The covered entity (CE), Atchafalaya Internal Medicine Associates, reported a malware attack on its desktop computers that may have compromised the protected health information (PHI) of 2000 patients. During the investigation, OCR learned that the owner of the CE had closed the business. On March 6, 2018, OCR received notification from the owner of Atchafalaya Internal Medicine Associates’ that all healthcare business activities for the entity have ceased, and the entity is no longer operating as a business. OCR verified that the office telephone number is out of service and the entity’s website no longer exists. The Secretary of State shows the entity has not had filings since February of 2017. Under these circumstances, Atchafalaya Internal Medicine Associates is no longer a covered entity and is not subject to the requirements of HIPAA.