Family Centers

The covered entity (CE), Family Center’s Inc., reported that an unauthorized actor obtained access to its computer system and exfiltrated certain files. The CE reported that the PHI included demographic and clinical/treatment for 12,142 individuals. Following the discovery of the incident, the CE provided notice to HHS, the affected individuals, and the media. In response to the breach, the CE changed and strengthened passwords, reviewed and reinforced multi-factor authentication, worked with a forensic specialist to remove malicious programs, updated its Security Awareness and Training policy, retrained staff on HIPAA policies and procedures, and continued and expanded its cybersecurity arrangements with a third-party security vendor.