The covered entity (CE), Chesapeake Regional Healthcare, reported that its business associate experienced a ransomware attack that affected the electronic protected health information (ePHI) of approximately 24,000 individuals. That ePHI involved included names, addresses, dates of birth, email addresses, Social Security numbers, and financial information. The CE notified HHS, affected individuals, and the media.
