Chicago Cosmetic Surgery and Dermatology

The covered entity (CE), Chicago Cosmetic Surgery and Dermatology, reported that its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 770 individuals. The PHI involved demographic, healthcare provider, and health insurance information. The CE notified HHS and the affected individuals; the BA notified the media. In response to the breach, the CE took steps to mitigate harm and implemented additional technical and administrative safeguards.