Packaging Corporation of America

Packaging Corporation of America, the covered entity (CE), reported that a vendor of its business associate (BA) experienced a cyber-attack that compromised the protected health information of 783 individuals. The PHI involved included names, addresses, dates of birth Social Security numbers, account identifiers, and other identifiers. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE provided complimentary credit monitoring services. The BA and vendor are currently under investigation.