The covered entity (CE), Fairbanks Urology, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 1,446 individuals. The PHI involved included clinical, demographic, and financial account information. The BA notified HHS, the affected individuals and the media. In response to the breach, the BA enhanced its security protocols and additional security measures were implemented with assistance from third-party forensic experts.