Citywide Health Plan

The covered entity (CE), Citywide Health Plan, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 718 individuals. The PHI involved included names, addresses, financial and claims information, dates of birth, Social Security numbers, and diagnoses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided complimentary identity monitoring services and implemented additional technical safeguards. OCR provided technical assistance to the CE.