EDI Health Group

EDI Health Group dba DentalXChange, the covered entity (CE), reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,574 individuals. The PHI included names, dates of birth, addresses, claims information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance regarding the HIPAA Rules.