Gary W Peer MD

The covered entity (CE), Gary W. Peer, MD, reported that his practice was the victim of a ransomware attack affecting approximately 3,400 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and offered complimentary credit monitoring services. The CE also established a toll-free number for questions or concerns. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its data and retrained its staff. OCR provided technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted.