The covered entity (CE), Peachtree Orthopaedic Clinic, P.A., reported that it experienced a cyberattack that compromised the protected health information (PHI) of 37,750 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, and diagnoses/conditions. The CE notified HHS, affected individuals, the media, and posted substitute breach notice on its website. In response to the breach, the CE implemented improved safeguards, including contracting with additional service providers for increased security and monitoring, and hardening its VPN configuration.
