Physicians' Spine and Rehabilitation Specialists of Georgia

The covered entity (CE), The Physicians’ Spine and Rehabilitation Specialists of Georgia, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 38,589 individuals. The PHI involved includes names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect its PHI. All staff were retrained.