OakBend Medical Center / OakBend Medical Group

The covered entity (CE), OakBend Medical Center/OakBend Medical Group, reported that it experienced a ransomware attack affecting the protected health information (PHI) of 500,000 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI. Complimentary credit monitoring services were also provided. OCR also provided the CE with technical assistance regarding the requirements under the HIPAA Security Rule.