Mercy Health Saint Mary's

The covered entity (CE), Mercy Health Saint Mary’s, reported that it experienced a malware attack that affected the electronic protected health information (ePHI) of 976 individuals. The ePHI involved included names, addresses, dates of birth, and Social Security numbers. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The CE provided complimentary credit monitoring and identity protection services. In response to the breach, the CE strengthened its technical safeguards to better protect its sensitive data.