The covered entity (CE), Florida Health Sciences Center dba Tampa General Hospital reported that it experienced a ransomware incident that affected the protected health information (PHI) of 2,430,920 individuals. The PHI involved includes names, addresses, zip codes, phone numbers, email addresses, race or ethnicity, Social Security numbers, dates of birth, medical record number, claims information, billing information, diagnoses/conditions, medications, treatment notes, dates of service, and health plan number. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring to affected individuals, and implemented administrative, technical and security safeguards.
