The covered entity (CE), Berkshire Farm Center and Services for Youth, reported that its business associate experienced a ransomware attack that affected the electronic protected health information (ePHI) of approximately 4,950 individuals. The ePHI involved included names, addresses, Social Security Numbers, drivers’ license numbers, financial information, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.
