Kilgore Vision Center

The covered entity (CE), Kilgore Vision Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of approximately 46,353 individuals. The ePHI involved included names, Social Security numbers, dates of birth, addresses, drivers’ license numbers, diagnoses, lab results, medications prescribed, health insurance information, and claims and financial information. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards. In addition, all workforce members were retrained in an effort to better protect its sensitive data. OCR obtained assurances that the CE implemented the corrective actions noted.