The covered entity (CE), Erlanger Health, Inc., reported that its business associate (BA) was the subject of a hacking attack that compromised the protected health information (PHI) of 2,753 individuals. The PHI involved included names, diagnoses, conditions, and other treatment information. The CE notified HHS; the BA notified affected individuals and the media. In response to the breach the BA implemented additional administrative, technical, and security safeguards.
