The covered entity (CE), Project Vida Health Center, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 4,500 individuals. The ePHI involved included names, addresses, and diagnoses and conditions. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE initiated a global password reset of all accounts, removed the compromised servers, and implemented additional technical safeguards to better protect its ePHI.
