Hospice of San Joaquin

The covered entity (CE), Hospice of San Joaquin, reported that its business associate (BA) IT Pro Source, was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of approximately 13,000 individuals. The ePHI involved included names, addresses, drivers’ license information, Social Security numbers, birthdates, claims information, financial information, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and provided a toll free telephone number for questions or concerns. In its mitigation efforts, the BA implemented new technology to safeguard ePHI and retrained all workforce members.