K and B Surgical Center

The covered entity (CE), K&B Surgical Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 14,774 individuals. The ePHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, addresses, diagnoses, medications prescribed, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring and identity theft protection services. In response to the breach, the CE disabled its network, secured its systems, hired an IT forensic firm to investigate the breach, retrained workforce members, and implemented additional technical safeguards.