Eau Claire Cooperative Health

The covered entity (CE), Eau Claire Cooperative Health dba Cooperative Health, reported that its business associate (BA) experienced a cyber-attack that compromised the electronic protected health information (ePHI) of 3,755 individuals. The ePHI involved included names, dates of birth, prescription information, and medical record numbers. The BA notified affected individuals and the media; the CE notified OCR. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect ePHI. OCR provided technical assistance to the CE regarding the HIPAA Breach Notification and Privacy Rules.