Gwenn S Robinson MD

The office of Gwenn S. Robinson, MD, the covered entity (CE), reported that an unauthorized user accessed its computer system and demanded a ransom to recover patient data, which was encrypted by the user. The CE determined that the breach affected the protected health information (PHI) of 2,500 individuals, specifically demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. As a result of the breach, the CE took steps to improve its security posture and implemented additional technical safeguards. OCR provided technical assistance to the CE to assist its compliance efforts.