Meigs County EMS

On October 6, 2016, the covered entity (CE), Meigs County EMS, reported that it detected a ransomware attack on its computer server, and that the hackers might have acquired patients’ protected health information (PHI). The breach affected approximately 817 individuals, and the types of PHI involved in the breach included demographic, financial, and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. In response to the breach, the CE implemented physical, administrative and technical safeguards. The CE also performed an audit of its computer network accounts by removing unnecessary or stale accounts. OCR obtained assurances that the CE implemented the corrective actions noted above.