The covered entity (CE), Midland Care Connection, reported that its business associate (BA) experienced a cyber-attack that affected approximately 1,364 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses/conditions, and medications. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, MCC provided complimentary credit and identity theft monitoring for affected individuals.
