Preferred Hospital Leasing Hemphill

The covered entity (CE), Preferred Hospital Leasing Hemphill dba Sabine County Hospital, reported that its business associate was the victim of a ransomware attack that compromised the protected health information (PHI) of 958 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. OCR has initiated a compliance review of the business associate regarding this breach.