Cerebral Palsy Research Foundation of Kansas

The covered entity (CE), Cerebral Palsy Research Foundation of Kansas, Inc., reported that the electronic protected health information (ePHI) of 8,300 individuals was exposed on an unsecured server. The ePHI involved included names, dates of birth, addresses, email addresses, health insurance information, Social Security numbers, phone numbers, diagnoses, and conditions. The CE notified HHS, affected individuals, the media, and provided substitute notice. In addition, the CE provided complimentary credit monitoring to affected individuals. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI and retrained its staff.