HCF of Briarwood

The covered entity (CE), HCF of Briarwood Inc. (Briarwood Village), reported that its management company, HCF Management, Inc., a business associate (BA), discovered suspicious activity on their computer network. The BA initiated an internal investigation, took steps to contain the incident, and engaged a third-party forensic security firm to further investigate. The BA determined that an unknown, unauthorized third party gained access to the BA’s computer systems, and accessed and acquired documents containing demographic and clinical protected health information (PHI) for 2,650 individuals. The CE notified HHS, affected individuals, and the media.