Intercommunity Action

The covered entity (CE), Intercommunity Action Inc., reported that an unauthorized individual gained access to its network server affecting the protected health information (PHI) of 2,680 individuals. The PHI involved included demographic, financial, and treatment information. The CE notified HHS, affected individuals, and the media of the breach, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its PHI.