Community Health Systems Professional Services Corporations

Community Health Systems Professional Services Corporation, the covered entity (CE), learned that its business associate (BA) experienced an IT incident that affected the protected health information (PHI) of 1,173,555 clients of the CE. The PHI included names, date of birth, Social Security numbers, claims information, diagnosis/conditions, lab results, medications, and other treatment information. The CE provided timely breach notification to the HHS Secretary, affected individuals, and media. HHS provided technical assistance to the CE regarding the applicable provisions of the HIPAA Privacy, Security and Breach Notification Rules.