Dermatology & Skin Cancer Center

The covered entity (CE), Dermatology & Skin Cancer Center, reported that its business associate (BA) was the victim of a ransomware attack that affected the protected health information (PHI) of 5,423 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, drivers’ license numbers, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. Additionally, the CE informed OCR that it ceased operations.