The covered entity (CE), Gillette Children's Specialty Healthcare, reported that its business associate (BA) was the subject of a cybersecurity incident that compromised the protected health information (PHI) of 542 individuals. The PHI involved included names, medical record numbers, and other treatment information. Steps were taken to mitigate harm and protect PHI.
