Parker-Hannifin Corporation Group Health Plans

The covered entity (CE), Parker-Hannifin Corporation Group Health Plans, reported that it experienced a cyber-attack that affected the protected health information (PHI) of 119,513 individuals. The PHI involved included names, Social Security numbers, dates of birth, addresses, health plan information, claims and financial information, treatment information, and drivers’ license and passport numbers. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring and identity protection services and implemented additional administrative and technical safeguards to better protect its PHI. Additionally, OCR provided technical assistance to the CE regarding its health information privacy compliance obligations.