Cardiology Center of Acadiana

Cardiology Center of Acadiana, the covered entity (CE), reported that protected health information (PHI) on a computer server became encrypted and unusable as a result of a ransomware attack. The attack affected the PHI of 9,681 individuals and included demographic, financial, and clinical information. The CE provided breach notification to the affected individuals, HHS, and the media. As a result of OCR’s investigation, the CE also took corrective action, implementing technical safeguards, including installing a new firewall.