Cornerstone Healthcare Group Management Services

Cornerstone Healthcare Group Management Services, the business associate (BA), reported that it experienced a hacking incident that compromised the protected health information (PHI) of 484,957 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, financial information, health insurance information and clinical information. The notified HHS, the affected individuals, and the media. In response to the breach, the BA strengthened its technical safeguards. OCR provided technical assistance to the BA pertaining to the HIPAA Breach Notification and Security Rules.