The covered entity (CE), The Brooklyn Hospital Center, reported that it was the subject of a malware attack that affected the electronic protected health information (ePHI) of 26,312 individuals. The ePHI involved included names and cardiac or dental images. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Following the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI.
