Politzer and Durocher

Optometric Physicians of Middle Tennessee, the covered entity (CE), reported that it experienced a cyber-attack that affected the protected health information (PHI) of 24,996 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses/conditions, medication information, and lab results. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards.