Health Center of Southeast Texas

The covered entity (CE), Health Center of Southeast Texas, reported that a subcontractor of its business associate (BA) experienced a hacking attack that compromised the protected health information (PHI) of 2,389 individuals. The PHI involved clinical, demographic, and financial information. The CE notified HHS, affected individuals, and published notice on its website; the subcontractor notified affected individuals and the media. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.