The covered entity (CE), Oscar Insurance Company of Florida, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 1,399 individuals. The PHI involved included names, email addresses, and health insurance information The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
