Partners HealthCare System, the covered entity (CE), reported that its computer system was infected with malware which affected 2,450 individuals. The PHI involved included names, treatment information, Social Security numbers, and financial information. Following this breach incident, the CE updated and implemented additional technical safeguards and retrained its workforce. OCR obtained assurances that the CE implemented the corrective actions noted above.
