Health Aid of Ohio

The covered entity (CE), Health Aid of Ohio, reported that it experienced a ransomware intrusion affecting the protected health information (PHI) of 141,149 individuals. The PHI involved included names, addresses, dates of birth, phone numbers, email addresses, social security numbers, claims information, health insurance information, diagnoses and medical conditions, lab results, medications, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance to the CE.