Premere Infinity Rehab

The covered entity (CE), Premere Infinity Rehab, reported that its business associate (BA) experienced a ransomware breach that compromised the protected health information (PHI) of 196,077 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, and medication data. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA strengthened its administrative and technical safeguards. OCR provided technical assistance to the CE regarding the HIPAA Rules.