GOLDEN HEART ADMINISTRATIVE PROFESSIONALS

The business associate (BA), reported that it was the victim of a cyber-attack involving ransomware that affected the electronic protected health information (ePHI) of approximately 44,000 individuals. The ePHI involved included names, addresses, birthdates, Social Security numbers, claims information, financial information, diagnoses, lab results, and other treatment information. The CE notified HHS, affected individuals, the media, and provided a toll-free phone number for questions and concerns. OCR provided technical assistance to the CE during the investigation.