HC Watkins Memorial Hospital

HC Watkins Memorial Hospital, the covered entity (CE), reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 634 individuals. The ePHI involved included names, dates of birth, addresses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards and retrained its staff. OCR obtained assurances that the BA implemented the corrective actions noted.