Indian Health Council

The covered entity (CE), Indian Health Council, Inc., reported that it was the victim of a ransomware attack that affected approximately 5,769 individuals. The electronic protected health information (ePHI) involved included names, birthdates, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE performed a comprehensive risk analysis and corresponding risk management plan and retrained employee on the requirement to protect the privacy and security of ePHI. involved included names, birthdates, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE performed a comprehensive risk analysis and corresponding risk management plan and retrained employee on the requirement to protect the privacy and security of ePHI.