Inland Physicians Billing Services

The covered entity (CE), Inland Physicians Billing Services, reported that experienced a ransomware attack that compromised the protected health information (PHI) of 77,434 individuals. The PHI involved included names, dates of birth, Social Security numbers, lab results, diagnoses, and health insurance and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach and OCR’s investigation, the CE updated its administrative and technical safeguards to better protect PHI. OCR provided technical assistance regarding the HIPAA Rules.