The covered entity (CE), Lawrence General Hospital, reported that it experienced a ransomware attack that affected the electronic protected health information (ePHI) of 176,587 individuals. The ePHI involved included names, clinical information, Social Security numbers, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. A phone line was created for questions or concerns and complimentary credit monitoring services were provided. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI.
