Desert Healthcare Services

The covered entity (CE), Desert Healthcare Services (DHS), LLC, reported that its server was compromised due to a ransomware attack. The breach affected 8,000 individuals. Based on a forensic analysis of its computer system, it was determined that it was unlikely that electronic protected health information (ePHI) was compromised since it was encrypted. DHS reported the breach to the FBI, hired a forensic investigator, and contracted with a cybersecurity firm to remove the malware from its server. In addition, DHS implemented additional security safeguards. Upon receiving the FBI and forensic reports on this matter, the CE provided breach notification to OCR, affected individuals, and the media.