MHMR Authority of Brazos Valley

The covered entity (CE), MHMR Authority of Brazos Valley, reported that it experienced a ransomware incident that affected the protected health information (PHI) of approximately 78,984 individuals who were patients of the CE. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, and diagnoses or conditions. The CE notified HHS, the affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE provided free credit monitoring to the affected individuals, and implemented additional administrative, technical, and security safeguards to better protect its PHI. During the investigation, OCR provided CE with technical assistance.