Portsmouth Community Health Center

Portsmouth Community Health Center, the covered entity (CE), reported that it was the victim of a cyber-attack involving the electronic protected health information (ePHI) of approximately 12,000 individuals. The ePHI involved included names, birthdates, addresses, drivers’ license information, Social Security numbers, financial information, clinical information, lab results, and medications prescribed. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional technical and security safeguards and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.