BEE Reno Dental

On October 30, 2017, the covered entity (CE), BEE Reno Dental, LLC, experienced a ransomware attack on its desktop computers and its network server that blocked access to its patient electronic protected health information (ePHI). The CE's computers and servers contained the ePHI of 3,898 individuals, including names, addresses, dates of birth, Social Security numbers, diagnoses, treatment plans, and health insurance information. The CE provided breach notification to affected individuals, HHS, and the media. In response to the breach, the CE revised and implemented updated HIPAA policies and procedures and retrained its workforce members. It also re-installed and reconfigured the domain controller, blocked remote access to its system, upgraded its computer operating system, and ensured the availability of backup service for all critical applications and data. OCR obtained assurances that the CE implemented the corrective actions listed.