Prominence Health Plan

The covered entity (CE), Prominence Health Plan, reported that its business associate (BA) suffered a cyber-attack that affected the electronic protected health information (ePHI) of approximately 45,380 individuals. The ePHI involved included names, addresses, dates of birth, health insurance information, claim codes, and other treatment information. The CE notified HHS, affected individuals, and the media. The CE also provided affected individuals with a dedicated phone number for questions and concerns. In response to the breach, the BA strengthened its technical and security safeguards.