Idaho Department of Health & Welfare

Idaho Department of Health & Welfare, the covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of approximately 2,501 individuals. The PHI involved included names and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA revised its policies and procedures to better protect PHI.