The covered entity (CE), Bayhealth Medical Center, Inc., reported that its business associate (BA) was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 565 individuals. The ePHI involved included names, dates of birth, and prescription information. The CE worked with its BA to notify HHS, affected individuals, the media, and posted substitute notice on its website.
