Physicians Dialysis

The covered entity (CE), Physicians Dialysis, reported that it experienced a ransomware attack that affected the electronic protected health information (ePHI) of 1,998 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, health insurance and claims information, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE reset all passwords, and implemented additional technical safeguards. OCR provided the CE with technical assistance regarding the Breach Notification Rule.