Community Health Group

Community Health Group, the covered entity (CE), reported that its business associate (BA) experienced a ransomware attack that affected the protected health information (PHI) of 824 individuals. The PHI involved included names, dates of birth, drivers’ license and Social Security numbers, state/tribal identification numbers, and medical information and health insurance information. The CE notified HHS; the BA notified affected individuals and the media. In response to the breach, the BA provided free credit monitoring and adopted additional technical security measures, revised policies and procedures, and implemented additional security training. During the investigation, OCR provided technical assistance.