Guthrie Clinic

The covered entity (CE), The Guthrie Clinic, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 92,064 individuals. The ePHI involved included names, age, gender, health insurance information, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.