Dental Center of Northwest Ohio

The covered entity (CE), Dental Center of Northwest Ohio, reported that its business associate (BA) was the subject of a ransomware attack that affected the protected health information of 85,874 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. During OCR’s investigation, the CE ceased operations and is no longer in business.