OneDigital

The business associate (BA), OneDigital, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 800 individuals. The PHI involved included names, addresses, dates of birth, and Social Security numbers. The BA notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the BA implemented additional administrative and technical safeguards and provided complimentary credit monitoring services to affected individuals.