Florida PACE Centers

Florida PACE Centers, the covered entity (CE), reported that its business associate (BA) experienced a ransomware attack that compromised the protected health information (PHI) of 1,504 individuals. The PHI involved included names, dates of birth, Social Security numbers, diagnoses, and other treatment information. The CE and the BA notified HHS, affected individuals, the media, and the FBI. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect PHI. OCR provided the CE with technical assistance regarding the HIPAA Privacy Rule.