The covered entity (CE), Crozer-Keystone Health System, reported that it was a victim of a ransomware attack that affected the electronic protected health information (ePHI) of 177,023 individuals. The ePHI involved included names, dates of birth, Social Security numbers, lab results, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional technical safeguards to better protected its ePHI.
