Commission on Economic Opportunity

The business associate (BA), Commission on Economic Opportunity, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 29,454 individuals. The PHI involved included names, addresses, dates of birth, and diagnoses. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and physical safeguards. The BA also provided training to its staff regarding its newly revised policies and procedures designed to protect PHI.