Keystone Health

Keystone Rural Health Center dba Keystone Health, the covered entity (CE), reported that it experienced a ransomware incident that affected the protected health information (PHI) of 235,237 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and medication information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its sensitive data. OCR provided technical assistance regarding the HIPAA Rules.