Good Health Medical

The covered entity (CE), Good Health Medical dba MY DR NOW, reported that it experienced a ransomware attack that affected the electronic protected health information (ePHI) of 36,781 individuals. The ePHI involved included names, dates of birth, and diagnoses. The CE notified HHS, affected individuals, and the media. As a result of OCR’s investigation, the CE revised its HIPAA security procedures, and implemented additional technical safeguards to better protect its computer systems that maintain ePHI.